bazelbuild / bazelbuild/bazelisk

Support BAZELISK_VERIFY_SHA256 for multiplatform projects

Open
#522 1 comment 5 reactions 0 assignees View on GitHub
help wanted P2 type: feature request
Dominant language
Go
Stars
2.7k
Forks
424
PR merge metrics
No merged PRs in 30d

Description

Bazelisk downloads platform specific version of bazel (windows,linux,etc) and then verifies SHA with value from BAZELISK_VERIFY_SHA256. It does not work if a given project is built on more than one platform.

Possibly bazelisk could search for platform specific SHA, and use those if found:

BAZELISK_VERIFY_SHA256_LINUX_X86_64
BAZELISK_VERIFY_SHA256_WINDOWS_ARM64

If specific variable is not found then it would fallback to BAZELISK_VERIFY_SHA256 as today.

Contributor guide

Open the contributing guide

Research direction

Start by locating the Go code that reads BAZELISK_VERIFY_SHA256, selects the platform-specific Bazel download, and verifies its checksum. Trace the existing platform naming and verification tests, then define coverage for Linux x86_64 and Windows ARM64 plus fallback to the current variable. Done means multiplatform projects can provide distinct checksums without breaking the existing setting.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
build-system, tooling
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
38/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.