forked from mirrors/gecko-dev
This improves the integrity of downloads of upstream artifacts when using fetch-content. If `verify-hash: True` is set on the fetch config, then the chain-of-trust.json of the upstream is used to retieve the expected sha256 of the artifact, and this is checked. Differential Revision: https://phabricator.services.mozilla.com/D87725 |
||
|---|---|---|
| .. | ||
| builder | ||
| iris | ||
| misc | ||
| tester | ||
| copy.sh | ||
| run-task | ||