-
Notifications
You must be signed in to change notification settings - Fork 281
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Remove binary artifacts due to security policy violation #1538
Remove binary artifacts due to security policy violation #1538
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@mateuszkuta256 thanks for taking this!
Please check if using implicit jar output can be used in places where original external jar was imported, like in this example
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@mateuszkuta256 I think we are very close to get this merged, please address the comments. Thanks for the patience.
test/src/main/scala/scalarules/test/scala_import/nl/BUILD.bazel
Outdated
Show resolved
Hide resolved
test/src/main/scala/scalarules/test/twitter_scrooge/thrift/bare_jar_thrifts/BUILD
Show resolved
Hide resolved
external_jars = [ | ||
"bare-thrift-1.jar", | ||
], | ||
srcs = ["//test/src/main/resources/scalarules/test:Bar.thrift"], |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
same as above. Do you know why the second test is needed?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
now I reference .jar directly
the second test is meant for test_version.sh, apparently every test running against various versions has its copy there
test/src/main/scala/scalarules/test/twitter_scrooge/thrift/bare_jar_thrifts/bare_jar_2/BUILD
Show resolved
Hide resolved
@@ -9,7 +9,7 @@ thrift_library( | |||
|
|||
scrooge_scala_import( | |||
name = "thrift3_import", | |||
scala_jars = ["thrift3_scrooge.jar"], | |||
scala_jars = ["//test/src/main/scala/scalarules/test/twitter_scrooge:scrooge3"], |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I'd like a comment (in the code) here about what's going on. Just by looking at the test is very hard to understand what's going on and how is it being tested.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
kk, hope the comment I added is useful
thx for your patience too ;D
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
🥇
Description
This PR removes .jar files that trigger security violation alert
Motivation
Resolves issue created by Allstar bot #1458