Shengjing Zhu <z...@debian.org> writes:

> On Mon, Jan 15, 2024 at 9:27 PM Simon Josefsson <si...@josefsson.org> wrote:
>>
>> Package: wnpp
>> Severity: wishlist
>> Owner: Simon Josefsson <si...@josefsson.org>
>>
>> * Package name    : golang-k8s-sigs-release-utils
>>   Version         : 0.7.7-1
>>   Upstream Author : Kubernetes SIGs
>> * URL             : https://github.com/kubernetes-sigs/release-utils
>> * License         : Apache-2.0
>>   Programming Lang: Go
>>   Description     : utilities for kubernetes Go release engineering (library)
>>
>>  Tiny utilities for use by the Release Engineering subproject and
>>  kubernetes/release (https://github.com/kubernetes/release/).
>>
>
> Which package will need this library? It looks strange by the name and
> description. We certainly don't do the release stuff for kubernetes.

Sigstore's rekor complained:

https://salsa.debian.org/jas/golang-github-sigstore-rekor/-/jobs/5160982

src/github.com/sigstore/rekor/cmd/backfill-redis/main.go:44:2: cannot find 
package "sigs.k8s.io/release-utils/version" in any of:
        /usr/lib/go-1.21/src/sigs.k8s.io/release-utils/version (from $GOROOT)
        
/builds/jas/golang-github-sigstore-rekor/debian/output/source_dir/_build/src/sigs.k8s.io/release-utils/version
 (from $GOPATH)

Use is here:

https://github.com/sigstore/rekor/blob/main/cmd/backfill-redis/main.go#L44

Can you think of some other solution than packaging
golang-k8s-sigs-release-utils?  I would be happy to learn about
alternative approaches to reduce golang dependencies.

/Simon

Attachment: signature.asc
Description: PGP signature

Reply via email to