bazelbuild / bazelbuild/bazelisk
Downloads should be validated
Open
P3
type: feature request
- Dominant language
- Go
- Stars
- 2.7k
- Forks
- 424
- PR merge metrics
- No merged PRs in 30d
Description
The `.bazelversion` file should allow developers to specify the SHAs of the files downloaded so that we can rest easy knowing that the bazel used by bazelisk is, well, not tainted.
Contributor guide
Assessment
This issue has not been assessed yet.