1 |
On Fri, Mar 27, 2020 at 01:16:43AM +0000, Samuel Bernardo wrote: |
2 |
> Dear all, |
3 |
> |
4 |
> Fulfilling the linting of ebuild code style design for software projects |
5 |
> that loads their dependencies during build, such as go based projects or |
6 |
> npm as an example, could be very nasty. |
7 |
> |
8 |
> Looking into source code of snapd or opennebula as two examples, I need |
9 |
> to break network sandbox to get all dependencies for snapd go modules or |
10 |
> opennebula sunstone npm code. |
11 |
Have you looked at the EGO_SUM in go-module? This already covers ANY go |
12 |
package that uses go.mod + go.sum, in a fully reproducible way that does |
13 |
not break network sandbox. |
14 |
|
15 |
-- |
16 |
Robin Hugh Johnson |
17 |
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer |
18 |
E-Mail : robbat2@g.o |
19 |
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85 |
20 |
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136 |