Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add rust toolchain and retris package #1

Merged
merged 6 commits into from
Sep 4, 2020
Merged

Add rust toolchain and retris package #1

merged 6 commits into from
Sep 4, 2020

Conversation

LinusCDE
Copy link
Member

@LinusCDE LinusCDE commented Sep 4, 2020

Hi,
see the commits for more info.

@LinusCDE LinusCDE changed the title Add rust to image and retris package Add rust toolchain and retris package Sep 4, 2020
@Eeems
Copy link
Member

Eeems commented Sep 4, 2020

@LinusCDE No oxide configuration?

@matteodelabre
Copy link
Member

Thanks for your work on this @LinusCDE. Will review as soon as possible.

@matteodelabre matteodelabre added the packages Add or improve packages of the repository label Sep 4, 2020
Copy link
Member

@matteodelabre matteodelabre left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Apart from this minor suggestion, everything looks good to me!

license=MIT

origin=https://github.com/LinusCDE/retris.git
revision=0.5.3-1
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

For security, I’d suggest putting the whole SHA-1 ID of the targeted commit here. If someone takes control of your repository, it’s easy for them to make the 0.5.3-1 tag points to different, potentially malicious code. This is harder to do with the commit ID, although attacks against SHA-1 are not unknown of.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

That's a very good idea. I even changed the tag sometime later to the latest commit, because I accidentally committed my custom ipkg. So yeah. They are very changeable which shouldn't be allowed here, indeed.

Copy link
Member

@matteodelabre matteodelabre left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Perfect! Thank you.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
packages Add or improve packages of the repository
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants