Closed dberenbaum closed 12 months ago
One extra consideration. In case of a monorepo, or even nested dvc.yaml
(?) we pass path name as part of the Git tag. I'm not sure if we are sanitizing it. Also, it means we have to support pretty much everything we allow in a path (except for some special symbols may be). @aguschin do you remember if you had any thoughts on this while developing monorepo scenario?
In case of a monorepo, or even nested dvc.yaml (?) we pass path name as part of the Git tag.
Yes, it's true.
I'm not sure if we are sanitizing it
No. But GTO should error out if path contains symbols that aren't allowed. There is a regex for this in constants.py
IIRC.
do you remember if you had any thoughts on this while developing monorepo scenario?
No specific thoughts, IIRC, except that I wanted to get back to this once I hear some user problem / concern around it.
@dberenbaum, with the PR merged, are there any other concerns, or is this safe to close?
There's still discussion in https://github.com/iterative/dvc/issues/9821, but let's open a separate issue if needed.
See discussion in https://github.com/iterative/gto/pull/398#discussion_r1312155921