[Ganciodocker] Reparto de trabajos

[Siroco]

Quoting fadelkon (2021-04-26 15:50:17)
> Meskio abrió esta issue hace unas semanas
> https://framagit.org/les/gancio/-/issues/104
> 
> > sign releases
> > 
> > The current way of getting gancio is or from npm registry or from framagit. In one case we put the trust in any of those hosting providers. I will prefer to be able to verify directly that the source code I download is being produced by the gancio team.
> 
> Lesion está firmando los tags ahora:
> 
> > I signed a new tag just to test (v1.0.0-dev) but it is not shown in the UI as signed commits are, this is a gitlab issue (https://gitlab.com/gitlab-org/gitlab/-/issues/19260) (but at least you can verify tags by your own from cli using git tag -v
> 
> Y los otros:
> 
> https://framagit.org/les/gancio/-/tags
> 
> Así que en vez de hacer "yarn install gancio" podríamos descargar el código verificable de framagit, verificarlo, y después hacer " yarn install .  " o como se haga para construir el proyecto.

Lo tienes en el Dockerfile mismo,
probar a ver si tira con esas reglas y si eso, pushearlo

> 
> A ver si le saco un rato mañana.
> 
> Salut!
> fdk
------------ próxima parte ------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: signature
URL: </pipermail/ganciodocker/attachments/20210426/a7fc2d27/attachment.sig>