[Lvfs-announce] Adding tests to the LVFS

Hi all,

I've just deployed a new version of the LVFS that scans firmware when
it is uploaded. At the moment it's just checking UEFI firmware to
ensure the capsule header is present, and valid. If firmware is
uploaded to the LVFS without a header it is currently fixed up at
deploy time by fwupd, but this makes it very fragile. Firmware files
without a capsule header can be staged for unintended devices, and we
have to guess the flags to use. Eventually I'd like to remove the
deploy-time heuristics in fwupd, although this can't happen for many
years for obvious reasons.

I've added a few people to the BCC who might have to read this email,
as some of their firmware is being marked as having a problem. As the
short-term workaround, QA users can still "waive" the test failure and
the problem won't show on the LVFS admin console. Longer term we are
going to be adding more tests to the LVFS, for instance doing malware
scans of the uploads.

There are some screenshots on
https://github.com/hughsie/lvfs-website/pull/232 if that helps.

If anyone needs me to write a small python program to prefix a UEFI
header to an existing binary, please let me know by creating a github
issue on https://github.com/hughsie/lvfs-website/issues -- thanks.

Richard.