[GitHub] [iceberg] kbendick commented on pull request #4206: Build: verify integrity of gradle distribution

[GitBox <gi...@apache.org>]

kbendick commented on pull request #4206:
URL: https://github.com/apache/iceberg/pull/4206#issuecomment-1050322407


   > LGTM, should we add a comment to that file with a link to https://gradle.org/release-checksums/ so that whenever somebody updates the gradle version can also directly update the checksum without having to search for that page?
   
   +1. I'd definitely add a comment with a link. Probbaly even a comment explicitly stating that we need to use the checksum from here on upgrade (though presumably things will break on upgrade and then somebody will find it). But at least having the link is important imo.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For additional commands, e-mail: issues-help@iceberg.apache.org