pjfanning commented on code in PR #615:
URL: https://github.com/apache/pekko-http/pull/615#discussion_r1792181196


##########
build.sbt:
##########
@@ -22,6 +22,7 @@ import 
com.lightbend.paradox.apidoc.ApidocPlugin.autoImport.apidocRootPackage
 sourceDistName := "apache-pekko-http"
 sourceDistIncubating := false
 
+ThisBuild / resolvers += Resolver.ApacheMavenSnapshotsRepo

Review Comment:
   * We have this resolver enabled in most other Pekko repos.
   * You can't get a snapshot into repository.apache.org unless you have access 
to Apache credentials.
   * The only snapshots we use are Pekko snapshots
   * So that means the risk is not that other ASF committers will attack us - 
they have to be a member of the Pekko PMC because it is my understanding that 
only Pekko PMC members have access to write Pekko snapshots - I must admit to 
being a bit unclear as how ASF Infra have set up our GitHub projects in terms 
of what Apache user it uses for CI publishes to repository.apache.org but I 
hope that it is a Pekko specific user as opposed to a user who can write 
snaphots jars for any Apache project.



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to