luca vogt
Results
2
comments of
luca vogt
## Summary Introduces //tools:download.bzl with secure_download() macro. Build fails if SHA-256 missing/wrong – mitigates supply-chain RCE reported in Google VRP issue 462506853. ## Testing bazel test //... passes; intentional hash...
CLA already signed – see https://cla.developers.google.com/clas/signed (Luca Vogt)