Skip to content

fix(cask): pass audit #5987

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 3 commits into from
Aug 15, 2025
Merged

fix(cask): pass audit #5987

merged 3 commits into from
Aug 15, 2025

Conversation

caarlos0
Copy link
Member

  • callers need to add the url.verified property if they want to pass audit
  • added the name which was missing
  • I think the problem with "unversioned url" is that it doesn't have #{version} in it, if so, this should fix it I think

refs https://github.com/orgs/goreleaser/discussions/5963

- callers need to add the `url.verified` property if they want to pass
  audit
- added the name which was missing
- I _think_ the problem with "unversioned url" is that it doesn't have
  `#{version}` in it, if so, this should fix it I think

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
@caarlos0 caarlos0 self-assigned this Aug 15, 2025
@caarlos0 caarlos0 marked this pull request as ready for review August 15, 2025 05:09
@pull-request-size pull-request-size bot added the size/L Denotes a PR that changes 100-499 lines, ignoring generated files. label Aug 15, 2025
Copy link

Deploying goreleaser with  Cloudflare Pages  Cloudflare Pages

Latest commit: 49639e8
Status: ✅  Deploy successful!
Preview URL: https://16b54784.goreleaser.pages.dev
Branch Preview URL: https://cask-audit.goreleaser.pages.dev

View logs

@caarlos0
Copy link
Member Author

caarlos0 commented Aug 15, 2025

cc/ @SMillerDev - can you take a look if my assumptions/fixes here are correct?

thank you so much 🙏🏻

Copy link

codecov bot commented Aug 15, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 82.75%. Comparing base (677a7f4) to head (49639e8).
⚠️ Report is 4 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #5987   +/-   ##
=======================================
  Coverage   82.75%   82.75%           
=======================================
  Files         165      165           
  Lines       16568    16570    +2     
=======================================
+ Hits        13711    13713    +2     
  Misses       2265     2265           
  Partials      592      592           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@SMillerDev
Copy link
Contributor

callers need to add the url.verified property if they want to pass audit

That's only needed if the download URL differs from the homepage URL.

I think the problem with "unversioned url" is that it doesn't have #{version} in it, if so, this should fix it I think

Yeah, I think that triggers it. The main thing is that without a version in the URL we can't use a sha check because every update would override the existing artifact.

@caarlos0
Copy link
Member Author

That's only needed if the download URL differs from the homepage URL.

yes, that's what i meant, sorry was not specific enough (it was 2am haha)

Yeah, I think that triggers it

figured... these changes are good then?

@SMillerDev
Copy link
Contributor

Yeah, lgtm

@caarlos0 caarlos0 merged commit e55afcd into main Aug 15, 2025
17 of 18 checks passed
@caarlos0 caarlos0 deleted the cask-audit branch August 15, 2025 17:34
@caarlos0
Copy link
Member Author

Thanks @SMillerDev 🙏🏻

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
size/L Denotes a PR that changes 100-499 lines, ignoring generated files.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants