mirror of
https://github.com/f-droid/fdroidserver.git
synced 2025-11-04 14:30:30 +03:00
checkupdates: exit with error if fdroiddata git repo is dirty
One key security property of the F-Droid ecosystem is that the sensitive code is all stored forever in git repos and source tarballs. That means we can easily go back and see if there where exploits and where they came from. Therefore, checkupdates should require everything in fdroiddata be committed to git before running. This provides --allow-dirty to override that behavior.
This commit is contained in:
parent
67d386d925
commit
86907d2ebf
2 changed files with 9 additions and 1 deletions
|
|
@ -174,7 +174,7 @@ __complete_publish() {
|
|||
|
||||
__complete_checkupdates() {
|
||||
opts="-v -q"
|
||||
lopts="--verbose --quiet --auto --autoonly --commit --gplay"
|
||||
lopts="--verbose --quiet --auto --autoonly --commit --gplay --allow-dirty"
|
||||
case "${cur}" in
|
||||
-*)
|
||||
__complete_options
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue