Skip to content

[ci.yaml] Replaced a wget with a curl - #40

Open
cmeybohm63 wants to merge 1 commit into
torch-spyre:mainfrom
cmeybohm63:conm/sonarqubefix
Open

cmeybohm63 wants to merge 1 commit into
torch-spyre:mainfrom
cmeybohm63:conm/sonarqubefix

Conversation

@cmeybohm63

Copy link
Copy Markdown

Replaced a wget command in .github/workflows/ci.yaml to prevent redirection attacks and enforce HTTPS.

Note that the issue of blindly trusting the initial website and being prone to a man in the middle/supply chain attack still exists, but would require a refactor of the code.

…ks and enforce HTTPS

Signed-off-by: Connor-Meybohm <Connor.Meybohm@ibm.com>
@cmeybohm63

Copy link
Copy Markdown
Author

Are there any other automatic tests that can be run to verify this change doesn't break anything?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant