Git-python patch for working with GPG signed commits

Dennis Gilmore dennis at ausil.us
Sun Dec 8 03:57:49 UTC 2013


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

El Sun, 08 Dec 2013 11:33:29 +0800
Mathieu Bridon <bochecha at fedoraproject.org> escribió:
> On Fri, 2013-12-06 at 13:26 +0100, Vít Ondruch wrote:
> > Dne 4.12.2013 03:39, Ankur Sinha napsal(a):
> > > Hi,
> > >
> > > A few months ago, we noticed that the current git-python version
> > > did not work with GPG signed commits[1]. Upstream's[2] been dead
> > > for almost 8 months now. There is however a pull request that
> > > adds support for GPG signed commits[3].
> > 
> > There are also other issues with GitPython package [1]. Better
> > would be to use some replacement if possible.
> 
> Agreed, for exampl I've reported upstream an fd/memory leak in
> GitPython more than a year and a half ago.
> 
> pygit2 seems to be much more actively developed:
>     https://github.com/libgit2/pygit2
> 
> Dennis, would you accept a patch that moves rpkg/fedpkg from GitPython
> to pygit2?

we would need some major regression testing but sure. there is updates
pending for el6, f18, f19, and f20 adding gpg support, it is available
in rawhide now.

Dennis

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
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=u6yH
-----END PGP SIGNATURE-----


More information about the infrastructure mailing list