Bug#950250: False positive for debian-watch-could-verify-download
Package: lintian
Version: 2.48.0
Severity: normal
With the following text in debian/watch:
version=3
opts="dversionmangle=s/^1://, pgpmode=mangle, pgpsigurlmangle=s|\.xz$|.sign|, decompress" \
https://www.kernel.org/pub/software/network/ethtool/ethtool-([1-9].*)\.tar\.xz
lintian reports:
W: ethtool source: debian-watch-could-verify-download debian/upstream/signing-key.asc
But if I reorder the options to:
version=3
opts="pgpmode=mangle, pgpsigurlmangle=s|\.xz$|.sign|, decompress, dversionmangle=s/^1://" \
https://www.kernel.org/pub/software/network/ethtool/ethtool-([1-9].*)\.tar\.xz
then the warning goes away.
Ben.
-- System Information:
Debian Release: bullseye/sid
APT prefers unstable-debug
APT policy: (500, 'unstable-debug'), (500, 'stable-updates'), (500, 'unstable'), (500, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 5.4.0-2-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), LANGUAGE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages lintian depends on:
ii binutils 2.33.50.20200115-2
ii bzip2 1.0.8-2
ii diffstat 1.63-1
ii dpkg 1.19.7
ii dpkg-dev 1.19.7
ii file 1:5.38-4
ii gettext 0.19.8.1-10
ii gpg 2.2.19-1
ii intltool-debian 0.35.0+20060710.5
ii libapt-pkg-perl 0.1.36+b2
ii libarchive-zip-perl 1.67-1
ii libberkeleydb-perl 0.62-1+b1
ii libcapture-tiny-perl 0.48-1
ii libcgi-pm-perl 4.44-1
ii libclass-accessor-perl 0.51-1
ii libclass-xsaccessor-perl 1.19-3+b3
ii libclone-perl 0.43-2
ii libdpkg-perl 1.19.7
ii libemail-valid-perl 1.202-1
ii libfile-basedir-perl 0.08-1
ii libfile-find-rule-perl 0.34-1
ii libfont-ttf-perl 1.06-1
ii libio-async-loop-epoll-perl 0.20-1
ii libio-async-perl 0.75-1
ii libipc-run-perl 20180523.0-2
ii liblist-compare-perl 0.53-1
ii liblist-moreutils-perl 0.416-1+b5
ii libmldbm-perl 2.05-2
ii libmoo-perl 2.003006-1
ii libmoox-aliases-perl 0.001006-1
ii libnamespace-clean-perl 0.27-1
ii libpath-tiny-perl 0.108-1
ii libtext-levenshtein-perl 0.13-1
ii libtimedate-perl 2.3100-1
ii libtry-tiny-perl 0.30-1
ii libtype-tiny-perl 1.008001-2
ii liburi-perl 1.76-1
ii libxml-libxml-perl 2.0134+dfsg-1+b1
ii libyaml-libyaml-perl 0.80+repack-2+b1
ii man-db 2.9.0-2
ii patchutils 0.3.4-2+b1
ii perl [libdigest-sha-perl] 5.30.0-9
ii t1utils 1.41-3
ii xz-utils 5.2.4-1+b1
Versions of packages lintian recommends:
ii libperlio-gzip-perl 0.19-1+b6
Versions of packages lintian suggests:
ii binutils-multiarch 2.33.50.20200115-2
ii libhtml-parser-perl 3.72-3+b4
ii libtext-template-perl 1.58-1
-- no debconf information
Reply to: