dotnet / dotnet/install-scripts
Validate checksums of downloaded files
Open
needs-pm-discussion
- Dominant language
- PowerShell
- Stars
- 213
- Forks
- 120
- PR merge metrics
- No merged PRs in 30d
Description
It's important for secure tool supply chain management that all packages that get downloaded from the internet get validated to be the same bits as officially published. Please add validating sha256 checksum of any downloaded binaries to ensure the bits downloaded are official and haven't been tampered with.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.