Re: [cross-project-issues-dev] Dates, review documentation, etc. for Mar

[Wayne Beaton <wayne@xxxxxxxxxxx>]

Correct. The downloads scanner scans the download server only.

We have no currently plans to extend it to scan repo.eclipse.org, so we're counting on committers being careful to not push unapproved third-party libraries there.

Please do open a bug, though. Perhaps there are other means to prevent unapproved libraries from being pushed there in the first place (rather than checking after the fact).

Wayne

On 09/02/15 03:13 PM, Matthias Sohn wrote:

On Mon, Feb 9, 2015 at 7:30 PM, Wayne Beaton <wayne@xxxxxxxxxxx> wrote:

Greetings. If your project is participating in Mars, please read this entire message.

The February 13th deadline for Mars CQs is this week. Get your Mars CQs in. Be sure to add a comment with a request for Mars prioritization.

You need a CQ for every version of a library you use. Check your builds; if you've pulled in a new version of a library, you may need a CQ for it.

The download scanner [1] may be of some help. Please heed the warnings provided by the tool: it is intended to provide assistance, but is limited in what it can do. Don't panic if you see a lot of red; it has a hard time sorting out non-bundle JAR files and so reports many false positives (some older projects will see this if they include straight-up JAR files in bundle directories; the Ant bundles are a good example of this). If you are concerned about what you see in the report: (1) don't panic; (2) ask me for assistance.

it looks like the scanner doesn't scan release artifacts in repo.eclipse.org, maybe it should ?

-Matthias

_______________________________________________
cross-project-issues-dev mailing list
cross-project-issues-dev@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/cross-project-issues-dev

--
Wayne Beaton
@waynebeaton
The Eclipse Foundation