Bug 2140710 (golang-github-oras-project-artifacts-spe) - Review Request: golang-github-oras-project-artifacts-spec - ORAS Artifacts Specification
Summary: Review Request: golang-github-oras-project-artifacts-spec - ORAS Artifacts Sp...
Keywords:
Status: NEW
Alias: golang-github-oras-project-artifacts-spe
Product: Fedora
Classification: Fedora
Component: Package Review
Version: rawhide
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Nobody's working on this, feel free to take it
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks: 2138841
TreeView+ depends on / blocked
 
Reported: 2022-11-07 17:15 UTC by Robert-André Mauchin 🐧
Modified: 2024-01-28 08:12 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed:
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Robert-André Mauchin 🐧 2022-11-07 17:15:54 UTC
Spec URL: https://eclipseo.fedorapeople.org/for-review/golang-github-oras-project-artifacts-spec.spec
SRPM URL: https://eclipseo.fedorapeople.org/for-review/golang-github-oras-project-artifacts-spec-1.0.0~rc.2-1.fc37.src.rpm

Description:
OCI Artifacts generalized the ability to persist artifacts within an OCI Distribution conformant registry enabling a wide range of individual artifacts. The majority of cloud registries, products and projects support pushing and pulling OCI Artifacts to a registry, enabling users to benefit from the performance, security, reliability capabilities. These common registry capabilities avoid the need to run, manage or care for Yet Another Storage Service (YASS).  A focus on storing secure supply chain artifacts, including Software Bill of Materials (SBoM), security scan results and signatures has prompted a new set of capabilities. Building on OCI Artifacts, the ORAS artifact.manifest generalizes the use cases of OCI image manifest by removing constraints defined on the image.manifest, while adding support for references between artifacts.  The ORAS Artifacts specification includes:   - Storing artifacts, with optional references, through the artifact.manifest  - Discovering referenced artifacts, through the referrers API

Fedora Account System Username: eclipseo

Comment 1 M Hickford 2022-11-13 17:17:01 UTC
"not yet a packager and the review is thus unofficial" looks good

Comment 2 Davide Cavalca 2023-01-17 06:17:05 UTC
Taking this review

Comment 3 Davide Cavalca 2023-01-17 06:20:27 UTC
Package was generated with go2rpm, simplifying the review.

- package builds and installs without errors on rawhide
- test suite is run and all unit tests pass
- latest version of the package is packaged
- license matches upstream specification and is acceptable for Fedora
- license file is included
- package complies with Golang Packaging Guidelines

Package APPROVED.

Comment 4 Package Review 2024-01-28 08:12:47 UTC
Package was never imported.
The ticket status is being reset, since creating the repository will require a fresh approval.
Let us know if you're still interested in this package.


Note You need to log in before you can comment on or make changes to this bug.