[Bug 775110] New: script for uninstalled setup should use https: instead of git: and --depth=1

[GStreamer (GNOME Bugzilla)]

https://bugzilla.gnome.org/show_bug.cgi?id=775110

            Bug ID: 775110
           Summary: script for uninstalled setup should use https: instead
                    of git: and --depth=1
    Classification: Platform
           Product: GStreamer
           Version: git master
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: Normal
         Component: don't know
          Assignee: gstreamer-bugs at lists.freedesktop.org
          Reporter: hanno at hboeck.de
        QA Contact: gstreamer-bugs at lists.freedesktop.org
     GNOME version: ---

Created attachment 340775
  --> https://bugzilla.gnome.org/attachment.cgi?id=340775&action=edit
proposed patch

The script at
https://cgit.freedesktop.org/gstreamer/gstreamer/plain/scripts/create-uninstalled-setup.sh
clones modules with the git:// protocol, which is problematic from a security
perspective, as it provides no authenticity of data. I suggest to use https
instead.

Also I think cloning the full repository history isn't necessary for this use
case and makes things unnecessarily slow. Adding --depth=1 causes the cloning
of a shallow copy. See attached patch.

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
You are the assignee for the bug.