vrr/open-code-review
2
0
Fork 0
mirror of https://github.com/alibaba/open-code-review.git synced 2026-07-09 17:28:58 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3
open-code-review/scripts
History
Exact
kite e9bd334b7f fix: enforce mandatory checksum verification and HTTPS-only registry access 
Previously, checksum failures in install.js were silently downgraded to
warnings, allowing unverified binaries to be installed. Similarly,
update.js accepted HTTP registries and skipped verification when no
matching platform entry was found.

Now both scripts treat checksum verification as mandatory when configured:
all failure paths (download error, compute error, mismatch, missing
platform entry) abort the operation and clean up downloaded files.
update.js also drops the http module and silently skips version checks
for non-HTTPS registries.
2026-06-16 16:15:14 +08:00
..
github-actions fix(actions): preserve failed inline review comments (#81) 2026-06-10 17:50:08 +08:00
publish build: Remove version from binary names and update related scripts 2026-05-22 23:11:37 +08:00
install.js fix: enforce mandatory checksum verification and HTTPS-only registry access 2026-06-16 16:15:14 +08:00
update.js fix: enforce mandatory checksum verification and HTTPS-only registry access 2026-06-16 16:15:14 +08:00