[
Date Prev][
Date Next][
Thread Prev][
Thread Next][
Date Index][
Thread Index]
[
List Home]
|
[iot-pmc] [CQ 18621] tomcat-embed-websocket-8.5.32
|
http://dev.eclipse.org/ipzilla/show_bug.cgi?id=18621
--- Comment #11 from Kai Hudalla <kai.hudalla@xxxxxxxxxxxx> 2019-01-28 02:22:53 ---
(In reply to comment #9)
> Hi Kai,
>
> yes, that's the URL where the sources for this specific bundle can be found.
>
The whole point of providing the URL to the source code *repository* is for the
IP team to get access to additional information they need for verifying the
provenance of the code. It is therefore necessary to provide the URL to the
source code *repository* where the code is maintained, not a URL pointing to
the same artifact that you have already attached.
Please also make sure to provide a proper URL (pointing to the tag/version
inside of the repository). Please keep this in mind for your future CQs as
well.
> Cheers, Alex
>
>
>
> (In reply to comment #6)
> > (In reply to comment #4)
> > > (In reply to comment #0)
> > > > Committer: Alexander Edelmann alexander.edelmann@xxxxxxxxxxxx
> > > > https://foundation.eclipse.org/people/people_edit.php?PersonID=aedelmann
> > > >
> > > > Project: iot.vorto
> > > >
> > > > Name: tomcat-embed-websocket-8.5.32
> > > > Description: Websocket functionality of Vorto Repository
> > > >
> > > > Due Diligence: Type_B
> > > > License(s): Apache License, 2.0
> > > >
> > > > Project URL: http://tomcat.apache.org/
> > > > Source URL: central.maven.org/maven2/org/apache/tomcat/embed/tomcat-embed-websocket/8.5.32/tomcat-embed-websocket-8.5.32-sources.jar
> > > > Cryptography: No.
> > > > Author(s):
> > > >
> > > > -------------------------------------
> > > >
> > > > This CQ was generated by the PMI
> > > >
> > >
> >
> > This doesn't look like the URL of the source code repository to me.
> >
>
--
Configure CQmail: http://dev.eclipse.org/ipzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the CQ.
