mirror of
https://github.com/mozilla/gecko-dev.git
synced 2024-10-08 02:14:43 +00:00
a2c4b8f1ea
This improves the integrity of downloads of upstream artifacts when using fetch-content. If `verify-hash: True` is set on the fetch config, then the chain-of-trust.json of the upstream is used to retieve the expected sha256 of the artifact, and this is checked. Differential Revision: https://phabricator.services.mozilla.com/D87725 |
||
---|---|---|
.. | ||
ci | ||
docker | ||
docs | ||
scripts | ||
taskgraph | ||
test | ||
.yamllint | ||
mach_commands.py | ||
moz.build |