Use JSON for known checksums (#415)

Browse Source

Ports the hardening from astral-sh/setup-uv#1025 to ruff-action.\n\nThis
stores generated checksums as JSON data behind a small typed TypeScript
wrapper, preventing values sourced from release metadata from being
mixed into generated executable code. It also updates the checksum
workflow and packaged action artifacts, and adds a regression test for
code-like keys and escaped checksum values.\n\nTests: npm run build, npm
run check, npm test, npm run package

...

This commit is contained in:

eifinger-bot

2026-08-28 16:15:05 -04:00

committed by GitHub

parent 6d5deb5cee

commit 127e6a115e

10 changed files with 6692 additions and 6659 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

dist/ruff-action/index.cjs

Generated Vendored

BIN

Binary file not shown.

dist/update-known-checksums/index.cjs

Generated Vendored

BIN

Binary file not shown.