promote comment to bug

This commit is contained in:
Joey Hess 2023-03-27 14:10:32 -04:00
parent c1d0f90081
commit f4a390b2a6
No known key found for this signature in database
GPG key ID: DB12DB0FF05F8F38
3 changed files with 40 additions and 0 deletions

View file

@ -0,0 +1,18 @@
[[!comment format=mdwn
username="joey"
subject="""comment 1"""
date="2023-03-27T18:03:11Z"
content="""
I think that git-annex addurl without --fast or --relaxed should
work with annex.securehashesonly set. (Unless annex.backend is set
to something it prevents adding.) It is currently failing because
of a temporary URL key that never reaches the repository. So the check
should be disabled for that.
Arguably with --relaxed (or --fast) it should also fail. However,
that does not actually download the content, so it does not technically
add content to the repository that is not using a cryptographically
signed hash. That's how it manages to skate by without failing.
Of course git-annex get will later fail, git-annex fsck
will complain, etc.
"""]]