# Heroic Games Launcher 2.22.1 — vendored upstream store clients.
#
# Only tags that cannot be fixed without rebuilding a vendored upstream release
# artifact are overridden here. Everything else was fixed rather than silenced:
# package-section-games-but-contains-no-game was resolved by correcting the
# section to utils, since this package installs a launcher and no game.

# ── Non-PIE vendored store client ──────────────────────────────────────────
# nile 1.2.0 is retained exactly as imLinguin/nile published it at tag v1.2.0
# (nile_linux_x86_64, sha256 d73519514df9d52c50c6feec629373cc3a0d9504e087b6c73
# 72a8ca8a95e7bfe), and the package asserts that byte-for-byte identity at build
# time and again in its container test. Upstream did not link that release
# position-independent. Rebuilding it with hardening flags would produce a
# binary that no longer matches any published release, which would destroy the
# provenance chain this package's redistribution claim rests on — so the
# unmodified upstream artifact is kept and the finding is recorded instead.
# The other three Linux clients and the Vulkan helper we build ourselves are
# all PIE; this override is deliberately narrow to the one file.
heroic: hardening-no-pie [usr/lib/heroic/app.asar.unpacked/build/bin/x64/linux/nile]
