metadata: better apt release file detection
Metadata
Current evaluation
Merged in canonical/fetch-service#12 via commit 21b2d02, tightening APT release-file detection to prevent false positives for legacy Release files.
Resolution: closed resolved
Reason: Pull request #12 was merged after approval from two reviewers, landing as commit 21b2d02. The change made APT legacy release-file detection stricter.
Evaluated by: mr-cal-bot
No scores available.
Issue body
Make detection a bit more strict to prevent false positives for
apt legacy release files.
- [x] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)?
-----
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged in canonical/fetch-service#12 via commit 21b2d02, tightening APT release-file detection to prevent false positives for legacy Release files. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged as commit 21b2d02, making APT release-file detection stricter to prevent false positives for legacy release files. | |
| qwen/qwen3.6-35b-a3b | — | closed resolved | Merged PR to make apt release file detection more strict, preventing false positives for apt legacy release files. |
Update history
| Date | Change |
|---|---|
| created |
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #422 fix(i/apt): prevent false positives in deb inspection | fetch-service | merged | Merged in canonical/fetch-service#422 (0a4cc2a), making deb inspection the final approval and enforcing Packages/Release verification dependencies to prevent false positives. | |
| #71 fix: enable and update the apt release test | fetch-service | merged | Merged in canonical/fetch-service#71; follow-up PR #75 (commit b9d7ce0) added missing APT release package-verification coverage after lint skipped the test run. | |
| #239 fix: properly set FETCH_APT_RELEASE_PUBLIC_KEY | fetch-service | merged | Merged in canonical/fetch-service#239: corrected ${SNAP} expansion and added fail-fast validation for FETCH_APT_RELEASE_PUBLIC_KEY; shipped in v0.2.3. | |
| #98 inspectors/apt: fix typo in error message | fetch-service | merged | Fixed a typo in an APT inspector error message; PR canonical/fetch-service#98 was merged as commit d2f04b2. |