heroku / heroku/buildpacks-python
Validate the SHA256 checksum of Python binaries
Open
enhancement
- Dominant language
- Rust
- Stars
- 33
- Forks
- 3
- Avg merge
- 12h 51m
- Merged PRs (30d)
- 9
Description
Currently the binaries are not validated during download from S3.
We should track the SHA256 in the manifest and validate using the streaming download/validation approach.
[Internal tracking epic](https://gus.lightning.force.com/lightning/r/ADM_Epic__c/a3QEE000000V4vN2AS/view)
Contributor guide
Assessment
This issue has not been assessed yet.