are there checksums (or other validation recomendation) ?
Open
Needs: Upvote
- Dominant language
- Bicep
- Stars
- 3.6k
- Forks
- 830
- Avg merge
- 1d 2h
- Merged PRs (30d)
- 79
Description
hello,
github runner images team here.
we are looking into improving supply chain security.
are there checksums available (or maybe other integrity validation) ?
cheers
Contributor guide
Research direction
The issue names no files, tests, or entry points. First determine which Bicep artifacts or downloads need integrity validation and review the existing release and distribution process; done requires a documented, agreed validation approach with an appropriate implementation scope.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- azure
- Domain
- cloud, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100