Groups
Sign in
Groups
Selenium Developers
Conversations
About
Send feedback
Help
Buck & SHA1s for bits pulled from Maven-land ?
60 views
Skip to first unread message
Paul Hammant
unread,
Jul 21, 2019, 1:55:20 PM
7/21/19
Reply to author
Sign in to reply to author
Forward
Sign in to forward
Delete
You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to selenium-developers
Should Buck have co-located SHA1s for use when verifying binarys procured from elswhere on the internet?
https://shattered.io
notwithstanding.
Ref:
https://github.com/SeleniumHQ/selenium/pull/7414/files
e.g.
https://github.com/SeleniumHQ/selenium/blob/a64df7271f4c1468064fe53d4bf0cf3a768df23d/third_party/java/okio/okio-2.2.2.jar
is sourced from
https://repo1.maven.org/maven2/com/squareup/okio/okio/2.2.2/
where the SHA1 is too.
Being able to run a command to confirm that these were correctly sourced would be super cool :)
- Paul
Reply all
Reply to author
Forward
0 new messages