audit: don't allow both sha256 and tag/revision for formula #8470
+13
−0
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
brew style
with your changes locally?brew tests
with your changes locally?There are a few cases where formulae started using a source archive with a sha checksum and later moved to a git checkout with a tag/revision. In the best case case, the sha is no longer irrelevant to the git repository and in general it is out of date. This style check will detect and flag cases where a formula both has a
sha256
as well as atag
andrevision
in theurl
.CI is expected to fail until changes to the formulae below are incorporated.