You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@netbeans.apache.org by GitBox <gi...@apache.org> on 2021/03/02 11:52:53 UTC

[GitHub] [netbeans] sdedic opened a new pull request #2787: Trust priming build, as the user already saw the warning.

sdedic opened a new pull request #2787:
URL: https://github.com/apache/netbeans/pull/2787


   When the user triggers Priming Build from Project problems window, another "Trust the project" dialog appears immediately. The Project Problems window already warned about potential code execution done as part of the Gradle script.
   
   This is inconsistent with manual Build action:
   - open a fresh untrusted, unprimed gradle project
   - dismis Project Problems window
   - execute Project | Build or Build from project's context menu
   => no warning, no dialog, project becomes trusted.
   
   This PR let the Priming Build behave just as a regular build: mark the project as trusted.


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@netbeans.apache.org
For additional commands, e-mail: notifications-help@netbeans.apache.org

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists


[GitHub] [netbeans] sdedic commented on pull request #2787: Trust priming build, as the user already saw the warning.

Posted by GitBox <gi...@apache.org>.
sdedic commented on pull request #2787:
URL: https://github.com/apache/netbeans/pull/2787#issuecomment-789582866


   Merging as it is: if the message proves to be confusing (i.e. users won't realize they're actually executing gradle), we can rephrase the message in a separate PR. 
   
   Anyway, some educational material could be made in the Wiki re. security considerations using Gradle or Ant + IDE that sniffs around.


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@netbeans.apache.org
For additional commands, e-mail: notifications-help@netbeans.apache.org

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists


[GitHub] [netbeans] jtulach commented on pull request #2787: Trust priming build, as the user already saw the warning.

Posted by GitBox <gi...@apache.org>.
jtulach commented on pull request #2787:
URL: https://github.com/apache/netbeans/pull/2787#issuecomment-790323573


   > Anyway, some ... material could be made in the Wiki re. security considerations using Gradle ... (or Maven) + IDE 
   
   Yes, let's describe what the behavior of seeking a consent should be in a [dedicated wiki page](https://cwiki.apache.org/confluence/display/NETBEANS/Consent+to+Analyze+a+Project)!


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@netbeans.apache.org
For additional commands, e-mail: notifications-help@netbeans.apache.org

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists


[GitHub] [netbeans] sdedic merged pull request #2787: Trust priming build, as the user already saw the warning.

Posted by GitBox <gi...@apache.org>.
sdedic merged pull request #2787:
URL: https://github.com/apache/netbeans/pull/2787


   


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@netbeans.apache.org
For additional commands, e-mail: notifications-help@netbeans.apache.org

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists