Comments (3)
jaimergp
commented on August 23, 2024
Update: conda-forge/artifact-validation is now archived. Need to update how validation is set up now.
Update 2: Artifact validation is currently disabled. Need to gather more context on why and whether having it back is a realistic assumption.
from czi-conda-forge-mgmt.
jaimergp
commented on August 23, 2024
File clobbering: is the package producing files that belong to another package? This is reported as an issue
This probably will need #54 to provide easy file-ownership checks. Note that some packages do need to clobber others (e.g. different variants of the same interface like BLAS stuff), but usually there's metadata we can use to infer that kind of thing (run_constrained, common mutex, etc).
from czi-conda-forge-mgmt.
jaimergp
commented on August 23, 2024
With the sqlite dumps in https://github.com/Quansight-Labs/conda-forge-paths we could now think of a setup where the validation action downloads the dump and queries it locally to see if there's clobbering or not, and warn if needed.
from czi-conda-forge-mgmt.
Related Issues (20)
- Add OCI registry support in conda/mamba
- OCI-Quetz integrations
- Finalize oras-py implementation HOT 2
- Choose / create repository to store WIP documentation HOT 3
- Upstream contributions related to security
- ENH - Project management
- Document existing infrastructure HOT 3
- Create a "basic" inventory of `conda-forge` resources and owners
- Create preliminar Infrastructure diagrams HOT 6
- Document security model
- Improve infrastructure diagrams HOT 4
- Client-side access to anaconda.org-provided .conda metadata in conda-forge.org/packages HOT 1
- Publicize conda-metadata-app through the conda-forge.org/packages page HOT 1
- Serve Python import maps outside libcfgraph HOT 1
- Files-to-artifacts database / API / mapping HOT 4
- Migrate content from cf-infra-docs to conda-forge.org (maybe iteratively) HOT 6
- Compile an audit report with suggestions and best practices
- Git-based files-to-artifacts database deployment prototype HOT 2
- Sqlite-based files-to-artifacts database deployment HOT 5
- Document used services and who has access to each one HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from czi-conda-forge-mgmt.