bicep icon indicating copy to clipboard operation
bicep copied to clipboard

are there checksums (or other validation recomendation) ?

Open ilia-shipitsin opened this issue 2 years ago • 3 comments

hello,

github runner images team here. we are looking into improving supply chain security.

are there checksums available (or maybe other integrity validation) ?

cheers

ilia-shipitsin avatar Oct 13 '23 11:10 ilia-shipitsin

Can you clarify where you are expecting checksums? Is it the bicep binaries on releases? Generated JSON? Artifacts we push and pull to/from ACR?

majastrz avatar Oct 25 '23 19:10 majastrz

Closing as no response, please reopen with more information

stephaniezyen avatar Nov 01 '23 19:11 stephaniezyen

sorry, I missed this issue. we are looking for checksums (or other integrity validation) for bicep binaries

ilia-shipitsin avatar Nov 02 '23 11:11 ilia-shipitsin