[Pkg-zsh-commits] [zsh-syntax-highlighting] 03/06: d/watch: Record plan for addressing lintian warning debian-watch-may-check-gpg-signature.

[Daniel Shahaf]

This is an automated email from the git hooks/post-receive script.

danielsh-guest pushed a commit to branch debian/master
in repository zsh-syntax-highlighting.

commit cd2952115e3723ae44eb9eee7decdca0a68a5895
Author: Daniel Shahaf <d.s at daniel.shahaf.name>
Date:   Mon Jul 31 22:57:05 2017 +0000

    d/watch: Record plan for addressing lintian warning debian-watch-may-check-gpg-signature.
---
 debian/watch | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/debian/watch b/debian/watch
index 0eb7e09..e6821c4 100644
--- a/debian/watch
+++ b/debian/watch
@@ -1,4 +1,10 @@
 # 'man uscan' for the format and usage of this file
+#
+# TODO: Re: lintian warning debian-watch-may-check-gpg-signature
+#   Upstream signs tags.  It should be possible to retrieve & verify the
+#   signatures on tag objects using the
+#   <https://developer.github.com/v3/git/tags/#tag-signature-verification>
+#   API, which is currently in beta.
 version=3
 opts=filenamemangle=s/.+\/(\d+\.\d+\.\d+)\.tar\.gz/zsh-syntax-highlighting-$1\.tar\.gz/ \
 https://github.com/zsh-users/zsh-syntax-highlighting/tags .*/archive/(?:zsh-syntax-highlighting-)?(\d+\.\d+\.\d+)\.tar\.gz

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-zsh/zsh-syntax-highlighting.git