Merge pull request #185005 from amjoseph-nixpkgs/pr/fetchgit/fix-comment

This commit is contained in:
Artturi 2023-01-14 19:50:20 +02:00 committed by GitHub
commit 1121c8fcb7
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -34,7 +34,7 @@ in
/* NOTE:
fetchgit has one problem: git fetch only works for refs.
This is because fetching arbitrary (maybe dangling) commits may be a security risk
This is because fetching arbitrary (maybe dangling) commits creates garbage collection risks
and checking whether a commit belongs to a ref is expensive. This may
change in the future when some caching is added to git (?)
Usually refs are either tags (refs/tags/*) or branches (refs/heads/*)