{"action":"opened","issue":{"url":"https://api.github.com/repos/owncloud/core/issues/24465","repository_url":"https://api.github.com/repos/owncloud/core","labels_url":"https://api.github.com/repos/owncloud/core/issues/24465/labels{/name}","comments_url":"https://api.github.com/repos/owncloud/core/issues/24465/comments","events_url":"https://api.github.com/repos/owncloud/core/issues/24465/events","html_url":"https://github.com/owncloud/core/issues/24465","id":153412519,"number":24465,"title":"Middle ground for 9.0+ integrity checking","user":{"login":"hogarthj","id":3037132,"avatar_url":"https://avatars.githubusercontent.com/u/3037132?v=3","gravatar_id":"","url":"https://api.github.com/users/hogarthj","html_url":"https://github.com/hogarthj","followers_url":"https://api.github.com/users/hogarthj/followers","following_url":"https://api.github.com/users/hogarthj/following{/other_user}","gists_url":"https://api.github.com/users/hogarthj/gists{/gist_id}","starred_url":"https://api.github.com/users/hogarthj/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/hogarthj/subscriptions","organizations_url":"https://api.github.com/users/hogarthj/orgs","repos_url":"https://api.github.com/users/hogarthj/repos","events_url":"https://api.github.com/users/hogarthj/events{/privacy}","received_events_url":"https://api.github.com/users/hogarthj/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2016-05-06T09:21:39Z","updated_at":"2016-05-06T09:21:39Z","closed_at":null,"body":"I'm in the process of packaging 9.0.2 for Fedora/EPEL7 and I appreciate the reasons the integrity checking was added but the message about missing files is something I'd rather not have my users encounter.\r\n\r\nIn order to comply with our guidelines we need to carry out the unbundling however - which of course leads to this.\r\n\r\nI'm aware of the hidden configuration option to disable the integrity checking - but that would affect validation of the apps from the store as well... which considering those apps don't come from RPM but just archive files would be well served to have validation (of signing and integrity).\r\n\r\nCould we have an option (via hidden configuration if need be) to only carry out the checks on appstore additions?\r\n"}}