On Fri, Mar 27, 2020 at 01:16:43AM +0000, Samuel Bernardo wrote: > Dear all, > > Fulfilling the linting of ebuild code style design for software projects > that loads their dependencies during build, such as go based projects or > npm as an example, could be very nasty. > > Looking into source code of snapd or opennebula as two examples, I need > to break network sandbox to get all dependencies for snapd go modules or > opennebula sunstone npm code. Have you looked at the EGO_SUM in go-module? This already covers ANY go package that uses go.mod + go.sum, in a fully reproducible way that does not break network sandbox.
-- Robin Hugh Johnson Gentoo Linux: Dev, Infra Lead, Foundation Treasurer E-Mail : robb...@gentoo.org GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85 GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136
signature.asc
Description: PGP signature
