Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Keep .sum files for modules #101

Merged
merged 1 commit into from
Dec 21, 2021
Merged

Keep .sum files for modules #101

merged 1 commit into from
Dec 21, 2021

Conversation

martin-sucha
Copy link
Contributor

.sum files are used for verifying the downloaded modules,
so are useful for security. Don't ignore them.

Fixes #15

@bwplotka
Copy link
Owner

Thanks for this @martin-sucha! Do you mind repushing. Somehow Github Actions did not run OR status was removed due to age of this PR? (: Let's get this merged!

@martin-sucha
Copy link
Contributor Author

Hi @bwplotka! I have squashed the commits here and pushed again. GitHub now says that a maintainer needs to approve the workflow.

Note that we have seen go.sum files being changed (new sum entries added) when running a tool using the Makefile targets, so it might be a little noisier. Could be caused by running the go build on a different machine or something? Anyway, wanted to let you know that we observed this. I have not investigated the root cause yet.

.sum files are used for verifying the downloaded modules,
so are useful for security. Don't ignore them.

Bingo deletes all *.tmp.* files.
We need to rename not just .mod file but .sum file as well.

We also need to copy the sum file to temporary file.
Existing users don't have .sum files in their .bingo directory,
so we ignore file not found errors for .sum files.

Fixes bwplotka#15
@martin-sucha
Copy link
Contributor Author

@bwplotka I have fixed the formatting, so linters should pass now. Please approve the workflow again.

Copy link
Owner

@bwplotka bwplotka left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks great, thanks!

@bwplotka bwplotka merged commit 38a0f49 into bwplotka:main Dec 21, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Consider support .sum files for security purposes.
2 participants