#351 [audit] mmd.name, mmd.stream and mmd.version must not be changable from modulemd
Closed Opened by jkaluza.

When we are building in Fedora from dist-git, we want to get mmd.name, mmd.stream and mmd.version only from the SCM URL. Current code (See utils.py::_fetch_mmd) allows people to overwrite that in the modulemd file, so you are for example to build "base-runtime" module even from "httpd" git repository.

I'm not sure if it's even useful to let the people to define these values in the modulemd outside the fedora when building from git. Maybe we should just overwrite what's in the mmd.name/mmd.stream/mmd.version according to git everytime.


See #355.

Metadata Update from @mprahl:
- Issue assigned to mprahl

Metadata Update from @mprahl:
- Issue status updated to: Closed (was: Open)

This issue has been migrated to Fedora Forge:
https://forge.fedoraproject.org/koji/mbs/issues/351

Please continue any further discussion there.

Metadata