Re: [RFC] General Resolution to deploy tag2upload

[Joerg Jaspert <joerg@debian.org>]

On 17258 March 1977, Luca Boccassi wrote:

> > The gitlab for salsa is
> >  a.) forcing us to follow a way that does *not* fit how Debian works 
> >  for
> >  uploads
> I have no idea what this means, sorry.

The way salsa (gitlab, git) works, does not fit how uploads in Debian
work. One of the reasons people built a ton of things that (ab)use parts
of git to make it work.

> >  b.) a codebase so much larger and made out of so many more 
> >  components
> >  than all of this proposals code combined together, it will be 
> >  *worse*.
> >  I mean, look at the security history of Gitlab. Sure, they are fast 
> >  in
> >  fixing. But they are *constantly* fixing things up with "critical
> >  release, apply ASAP".
> You can take that paragraph, do s/Gitlab/Linux kernel/ and it would
> still 100% apply. So do you propose that this additional forge runs on
> Hurd then? It's got no security advisories! A nice and clean security
> history.

It is *not* a forge. It is a git store. Not even one directly touched by 
users.

--
bye, Joerg