Philip Hands writes ("Re: Bug#1023468: dgit: the format of --dep14tag tags
should be customisable"):
> Philip Hands <p...@hands.com> writes:
> > So one might have:
> >
> > dgit-distro.debian.dgit-tag-filter="sed -ne 's,^debian/1%,,p'"
>
> Except of course one wants to be able to set this in the repo somehow,
> in order that anyone cloning the repo also gets to generate the right
> sort of tags, so there's no way one should be able to tell other people
> to execute arbitary commands when running dgit, so I guess the PRETTY
> FORMAT idea is what's actually required.
dgit doesn't normally take git processing instructions from the
contents source tree. The usual reason for that is that the
instructions might be inapplicable with the current tree format (eg,
applied vs unapplied). I don't think that applies here, but it would
be a good idea for us to think some more about whether there are other
possible risks of this. Besides the "program execution" one you
mention.
Ian.
--
Ian Jackson <ijack...@chiark.greenend.org.uk> These opinions are my own.
Pronouns: they/he. If I emailed you from @fyvzl.net or @evade.org.uk,
that is a private address which bypasses my fierce spamfilter.
