Skip to content

Keep .sum files for modules#101

Merged
bwplotka merged 1 commit intobwplotka:mainfrom
kiwicom:ms/sum-files
Dec 21, 2021
Merged

Keep .sum files for modules#101
bwplotka merged 1 commit intobwplotka:mainfrom
kiwicom:ms/sum-files

Conversation

@martin-sucha
Copy link
Copy Markdown
Contributor

.sum files are used for verifying the downloaded modules,
so are useful for security. Don't ignore them.

Fixes #15

@bwplotka
Copy link
Copy Markdown
Owner

Thanks for this @martin-sucha! Do you mind repushing. Somehow Github Actions did not run OR status was removed due to age of this PR? (: Let's get this merged!

@martin-sucha
Copy link
Copy Markdown
Contributor Author

Hi @bwplotka! I have squashed the commits here and pushed again. GitHub now says that a maintainer needs to approve the workflow.

Note that we have seen go.sum files being changed (new sum entries added) when running a tool using the Makefile targets, so it might be a little noisier. Could be caused by running the go build on a different machine or something? Anyway, wanted to let you know that we observed this. I have not investigated the root cause yet.

.sum files are used for verifying the downloaded modules,
so are useful for security. Don't ignore them.

Bingo deletes all *.tmp.* files.
We need to rename not just .mod file but .sum file as well.

We also need to copy the sum file to temporary file.
Existing users don't have .sum files in their .bingo directory,
so we ignore file not found errors for .sum files.

Fixes bwplotka#15
@martin-sucha
Copy link
Copy Markdown
Contributor Author

@bwplotka I have fixed the formatting, so linters should pass now. Please approve the workflow again.

Copy link
Copy Markdown
Owner

@bwplotka bwplotka left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks great, thanks!

@bwplotka bwplotka merged commit 38a0f49 into bwplotka:main Dec 21, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Consider support .sum files for security purposes.

2 participants