search

cirocosta / estaleiro

building container images with bill of materials
Apache License 2.0
2 stars 0 forks source link

?: packages without source #25

Closed cirocosta closed 5 years ago

cirocosta commented 5 years ago

There are some cases where repositories simply don't have a source counterpart that is able to give us the source code for the contents that are being packages.

How should we deal with that?

cirocosta commented 5 years ago 
changeset:
    files: []
    packages:
      - name: containerd.io
        version: 1.2.6-3
        source_package: ""
        architecture: amd64
        location:
            uri: https://download.docker.com/linux/ubuntu/dists/bionic/pool/stable/amd64/containerd.io_1.2.6-3_amd64.deb
            digest: md5:032bc450224b31b17f88230bc430e00b
            name: containerd.io_1.2.6-3_amd64.deb
        sources:
          - git:
                repository_uri: https://github.com/containerd/containerd
                ref: v1.2.6
cirocosta commented 5 years ago 
    package "containerd.io" {
      version = "1.2.6-3"

      vcs "git" {
        repository = "https://github.com/containerd/containerd"
        ref        = "v1.2.6"
      }
    }