gnu: python-check-manifest: Relax git security settings in tests.

* gnu/packages/python-xyz.scm (python-check-manifest)[arguments]:
  Allow git submodule commands via file protocol during testing.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>
This commit is contained in:
Ontje Lünsdorf 2022-11-11 21:09:21 +01:00 committed by Ludovic Courtès
parent 45fe602602
commit a4ea82b671
No known key found for this signature in database
GPG key ID: 090B11993D9AEBB5

View file

@ -25584,6 +25584,17 @@ (define-public python-check-manifest
(build-system python-build-system) (build-system python-build-system)
(native-inputs (native-inputs
(list python-mock git)) (list python-mock git))
(arguments
`(#:phases
(modify-phases %standard-phases
;; Tests use git submodule commands over the file transport, which
;; has been disabled in git, see CVE-2022-39253. Enable these
;; commands to allow checks to succeed.
(add-before 'check 'allow-git-submodule-add
(lambda _
(setenv "HOME" "/tmp")
(invoke "git" "config" "--global"
"protocol.file.allow" "always"))))))
(home-page "https://github.com/mgedmin/check-manifest") (home-page "https://github.com/mgedmin/check-manifest")
(synopsis "Check MANIFEST.in in a Python source package for completeness") (synopsis "Check MANIFEST.in in a Python source package for completeness")
(description "Python package can include a MANIFEST.in file to help with (description "Python package can include a MANIFEST.in file to help with