On 2019-06-06, Stephen Gallagher <sgallagh(a)redhat.com> wrote:
Might be worth asking if there's a reason to need this offline.
If the
exact commit ID is stored in Koji and is authoritative, also tagging
it into git might be convenient for offline purposes. The fact that
it's not immutable is probably not an issue as long as the
authoritative site *is*. (e.g. The same script that gets the hash from
Koji could also detect if someone manually changed it in git, which
would probably qualify as suspicious behavior.)
If tags in dist-git could disagree with Koji, people could not rely on
them and would use Koji instead rendering tags in dist-tag useless.
-- Petr