Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Heavy dependence on non-reproducible artifacts #297

Open
MightyAlex200 opened this issue Oct 14, 2023 · 0 comments
Open

Heavy dependence on non-reproducible artifacts #297

MightyAlex200 opened this issue Oct 14, 2023 · 0 comments

Comments

@MightyAlex200
Copy link

The build scripts included in this repository are heavily dependent upon the exe files in bin/, and the whole repository in general is filled with generated outputs. This is generally considered bad practice as it reduces portability, increases file size unnecessarily, produces redundant information which can quickly become out of date, and gives malicious actors the opportunity to hide malware in opaque executable files.

I am making this issue as a Linux user primarily because I don't want to have to use WINE to use a development tool which apparently has no dependence on Windows whatsoever.

Can we take steps to fix this? In particular:

  • Removing all exe, dll, jar, and a files from the source tree
  • Removing all doxygen generated files from the source tree
  • Removing compiled ROM binaries in sample directory

Of course, all exe, a, jar, etc. files generated by source code in this repository can and should continue to be released as artifacts in Github releases.

joeyparrish added a commit to joeyparrish/SGDK that referenced this issue Apr 4, 2024
These are no longer needed, since they can be easily generated from
source now.

Closes Stephane-D#297
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant