[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#922557: lintian: Please check whether there's an expected orig tarball signature



On Mon, Feb 18, 2019 at 02:30:05AM +0100, Guillem Jover wrote:
> It would be nice to get a warning to avoid this. I imagine a tag
> could be emitted whenever there is no «*.orig.tar.*.asc» (for each
> «*.orig.tar.*») and either of the following holds:
> 
>   - there is a debian/upstream/signing-key.asc file.
>   - there is pgpmode or pgpsigurlmangle in opts in debian/watch.

There is already such a tag, orig-tarball-missing-upstream-signature.
That's a .changes checks, not a .dsc one, so it would be emitted only
for -1.
Indeed it probably makes sense to turn this into a .dsc tag, that would
also have the added benefit of being emitted in lintian.d.o as well
(where there are no .changes files to check).

-- 
regards,
                        Mattia Rizzolo

GPG Key: 66AE 2B4A FCCF 3F52 DA18  4D18 4B04 3FCD B944 4540      .''`.
more about me:  https://mapreri.org                             : :'  :
Launchpad user: https://launchpad.net/~mapreri                  `. `'`
Debian QA page: https://qa.debian.org/developer.php?login=mattia  `-

Attachment: signature.asc
Description: PGP signature


Reply to: