mirror of
https://github.com/astral-sh/ruff-action.git
synced 2026-09-16 10:21:30 +00:00
eifinger-bot
127e6a115e
Ports the hardening from astral-sh/setup-uv#1025 to ruff-action.\n\nThis stores generated checksums as JSON data behind a small typed TypeScript wrapper, preventing values sourced from release metadata from being mixed into generated executable code. It also updates the checksum workflow and packaged action artifacts, and adds a regression test for code-like keys and escaped checksum values.\n\nTests: npm run build, npm run check, npm test, npm run package
4 lines
124 B
Plaintext
4 lines
124 B
Plaintext
* text=auto eol=lf
|
|
dist/** -diff linguist-generated=true
|
|
src/download/checksum/known-checksums.json linguist-generated=true
|