This repository has been archived by the owner on Nov 5, 2024. It is now read-only.

This repository has been archived by the owner on Nov 5, 2024. It is now read-only.

Security Concern about downloading packages from github #95

Open

Open

Security Concern about downloading packages from github#95

Context:

DOWNLOAD https://raw.githubusercontent.com/c9/install/master/packages/*

Problem:

Download is not locked down to a particular revision (master)
Download integrity is not verified.

I am no security expert but I would be happy to elaborate on why these are problems if desired.

to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Assignees

No one assigned

Labels

No labels

No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests