Closed ericLemanissier closed 2 years ago
Indeed it looks like the archived tarballs from googlesource.com
are generated upon request, and the metadata changes each time (the contents are the same):
Indeed the change for every request, the time is part of the package metadata. Unfortunately, I see no possible fix, besides skipping them from that hook.
projects hosted on googlesource.com provide archives with non-stable hash. The archive seem to be regenerated at least several times a day (maybe for each download request ?).
The best solution is to disable the check for sha256 attribute if the url starts with
https://*.googlesource.com