luca vogt issues

Repositories
Issues
Comments

Results 1 issues of


                                            luca vogt

Enforce SHA-256 for all external downloads

Mitigates supply-chain RCE (Google VRP issue 462506853). Any genrule that downloads external tarballs now **must** provide SHA-256; otherwise the build fails. **What type of PR is this?** > Uncomment one...