Skip to content

harden aur_pre_build #2228

Open
Open
@lilydjwg

Description

@lilydjwg

问题类型 / Type of issues

  • 其它 / other

受影响的软件包 / Affected packages


aur_pre_build API 支持指定 AUR 维护者已经有一段时间了,不过采用率很不好看。现在我计划将指定 AUR 维护者作为必填,以避免 AUR 包被别人接手后加入恶意或者垃圾代码。

maintainers 参数可以是 str 或者 list[str],指定信任的 AUR 维护者/最后打包者。如果 lilac 打包时,最后打包者不在这个参数里,将会拒绝打包。请各维护者更新相关包,指定该参数。


There has been some time that the aur_pre_build API supports specifying AUR maintainers. However, it's not widely used. Now I'm going to make it mandatory to specify AUR maintainers to avoid AUR packages with evil or poor code that's added by later adopter.

The maintainers argument can be str or list[str] to specify trusted AUR maintainers / last packagers. When lilac packages, if the last packager is not in this argument, lilac will refuse to package. Please add this argument for your packages!

Metadata

Metadata

Labels

no-lilacMake lilac skip this issue

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions