Bug 2140710 (golang-github-oras-project-artifacts-spe) - Review Request: golang-github-oras-project-artifacts-spec - ORAS Artifacts Specification
Summary: Review Request: golang-github-oras-project-artifacts-spec - ORAS Artifacts Sp...
Keywords:
Status: CLOSED NOTABUG
Alias: golang-github-oras-project-artifacts-spe
Product: Fedora
Classification: Fedora
Component: Package Review
Version: rawhide
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Nobody's working on this, feel free to take it
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks: FE-DEADREVIEW 2138841
TreeView+ depends on / blocked
 
Reported: 2022-11-07 17:15 UTC by Robert-André Mauchin 🐧
Modified: 2025-02-28 00:45 UTC (History)
3 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2025-02-28 00:45:30 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Robert-André Mauchin 🐧 2022-11-07 17:15:54 UTC
Spec URL: https://eclipseo.fedorapeople.org/for-review/golang-github-oras-project-artifacts-spec.spec
SRPM URL: https://eclipseo.fedorapeople.org/for-review/golang-github-oras-project-artifacts-spec-1.0.0~rc.2-1.fc37.src.rpm

Description:
OCI Artifacts generalized the ability to persist artifacts within an OCI Distribution conformant registry enabling a wide range of individual artifacts. The majority of cloud registries, products and projects support pushing and pulling OCI Artifacts to a registry, enabling users to benefit from the performance, security, reliability capabilities. These common registry capabilities avoid the need to run, manage or care for Yet Another Storage Service (YASS).  A focus on storing secure supply chain artifacts, including Software Bill of Materials (SBoM), security scan results and signatures has prompted a new set of capabilities. Building on OCI Artifacts, the ORAS artifact.manifest generalizes the use cases of OCI image manifest by removing constraints defined on the image.manifest, while adding support for references between artifacts.  The ORAS Artifacts specification includes:   - Storing artifacts, with optional references, through the artifact.manifest  - Discovering referenced artifacts, through the referrers API

Fedora Account System Username: eclipseo

Comment 1 M Hickford 2022-11-13 17:17:01 UTC
"not yet a packager and the review is thus unofficial" looks good

Comment 2 Davide Cavalca 2023-01-17 06:17:05 UTC
Taking this review

Comment 3 Davide Cavalca 2023-01-17 06:20:27 UTC
Package was generated with go2rpm, simplifying the review.

- package builds and installs without errors on rawhide
- test suite is run and all unit tests pass
- latest version of the package is packaged
- license matches upstream specification and is acceptable for Fedora
- license file is included
- package complies with Golang Packaging Guidelines

Package APPROVED.

Comment 4 Package Review 2024-01-28 08:12:47 UTC
Package was never imported.
The ticket status is being reset, since creating the repository will require a fresh approval.
Let us know if you're still interested in this package.

Comment 5 Package Review 2025-01-28 00:45:28 UTC
This is an automatic check from review-stats script.

This review request ticket hasn't been updated for some time. We're sorry
it is taking so long. If you're still interested in packaging this software
into Fedora repositories, please respond to this comment clearing the
NEEDINFO flag.

You may want to update the specfile and the src.rpm to the latest version
available and to propose a review swap on Fedora devel mailing list to increase
chances to have your package reviewed. If this is your first package and you
need a sponsor, you may want to post some informal reviews. Read more at
https://fedoraproject.org/wiki/How_to_get_sponsored_into_the_packager_group.

Without any reply, this request will shortly be considered abandoned
and will be closed.
Thank you for your patience.

Comment 6 Package Review 2025-02-28 00:45:30 UTC
This is an automatic action taken by review-stats script.

The ticket submitter failed to clear the NEEDINFO flag in a month.
As per https://fedoraproject.org/wiki/Policy_for_stalled_package_reviews
we consider this ticket as DEADREVIEW and proceed to close it.


Note You need to log in before you can comment on or make changes to this bug.