On Wed, 2008-09-10 at 14:49 +0200, Denis Leroy wrote: > Matt Domsch wrote: > > The question is - can an automated tool, given a binary RPM, request > > of CVS the corresponding source code for it? Yes, unless people can > > arbitrarily re-tag after the packages have been published. Then there > > is no guarantee that what is tagged in CVS matches the source code for > > a given package. Indeed. I got the point :) But like others, I'm saying it's a non-problem until the package has ever been made available. > I think we all agree that re-tagging after packages have been built is > plain wrong. Hmm...actually, I'd prefer it to be an issue only after you've released those packages, but I suppose the argument will be that once a package is there in koji someone might download it. > However this doesn't invalidate the various uses of > force-tag that have been discussed in this thread. All we need is a > mechanism such that a successful koji build automatically renders the > associated tag immutable. Or we could trust people to do the right thing ;) Jon. -- fedora-devel-list mailing list fedora-devel-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-devel-list
