Diffusion Generic VCS/Package Loader 5482a48ea1bd

Use tarball checksum to check download integrity in package loaders
5482a48ea1bd
Actions

Description

Use tarball checksum to check download integrity in package loaders

When one or multiple tarball checksums are available, either from listers
output or from Web APIs calls perfomed by some loaders, use them to check
integrity of downloaded tarballs.

Details

Provenance

anlambert	Authored on Sep 29 2022, 5:20 PM
anlambert	Pushed on Oct 3 2022, 10:55 AM

Differential Revision

D8595: Use tarball checksum to check download integrity in package loaders

Parents

rDLDBASEf774aba59e65: Add Content Loader to ingest raw content file

Branches

Unknown

Tags

Unknown

Build Status

Buildable 32010
Build 50111: test-and-build	Jenkins console · Jenkins

Event Timeline

anlambert committed rDLDBASE5482a48ea1bd: Use tarball checksum to check download integrity in package loaders (authored by anlambert).Sep 30 2022, 6:28 PM

anlambert added an edge: D8595: Use tarball checksum to check download integrity in package loaders.Oct 3 2022, 10:55 AM

Harbormaster failed to build B32010: rDLDBASE5482a48ea1bd: Use tarball checksum to check download integrity in package loaders!Oct 3 2022, 10:57 AM

swh-public-ci mentioned this in D8596: package/utils: Fix download function documentation.Oct 3 2022, 12:36 PM

swh-public-ci mentioned this in D8600: cli: Use memory storage as fallback when no configuration detected.Oct 3 2022, 2:03 PM

swh-public-ci mentioned this in D8584: Add Directory Loader to allow tarball ingestion as Directory.Oct 3 2022, 2:36 PM

Changes (22)

Path

Size

requirements-swh.txt

swh/

loader/

package/

arch/

tests/

archive/

tests/

cran/

maven/

tests/

data/

https_maven.org/

sprova4j-0.1.0-sources.jar.sha1

sprova4j-0.1.1-sources.jar.sha1

npm/

opam/

tests/

pubdev/

tests/

data/

https_pub.dev/

api_packages_Autolinker

api_packages_authentication

puppet/

tests/

pypi/

rDLDBASE5482a48ea1bd

View Options

requirements-swh.txt

View Options

swh/loader/package/arch/loader.py

View Options

swh/loader/package/arch/tests/test_arch.py

View Options

swh/loader/package/archive/loader.py

View Options

swh/loader/package/archive/tests/test_archive.py

View Options

swh/loader/package/cran/loader.py

View Options

swh/loader/package/loader.py

View Options

swh/loader/package/maven/loader.py

View Options

swh/loader/package/maven/tests/data/https_maven.org/sprova4j-0.1.0-sources.jar.sha1

View Options

swh/loader/package/maven/tests/data/https_maven.org/sprova4j-0.1.1-sources.jar.sha1

View Options

swh/loader/package/maven/tests/test_maven.py

View Options

swh/loader/package/npm/loader.py

View Options

swh/loader/package/opam/loader.py

View Options

swh/loader/package/opam/tests/test_opam.py

View Options

swh/loader/package/pubdev/loader.py

View Options

swh/loader/package/pubdev/tests/data/https_pub.dev/api_packages_Autolinker

View Options

swh/loader/package/pubdev/tests/data/https_pub.dev/api_packages_authentication

View Options

swh/loader/package/pubdev/tests/data/https_pub.dev/api_packages_bezier

View Options

swh/loader/package/pubdev/tests/data/https_pub.dev/api_packages_pdf

View Options

swh/loader/package/puppet/loader.py

View Options

swh/loader/package/puppet/tests/test_puppet.py

View Options

swh/loader/package/pypi/loader.py

Use tarball checksum to check download integrity in package loaders5482a48ea1bdActions

Description

Details

Event Timeline

Changes (22)

rDLDBASE5482a48ea1bd

requirements-swh.txt

swh/loader/package/arch/loader.py

swh/loader/package/arch/tests/test_arch.py

swh/loader/package/archive/loader.py

swh/loader/package/archive/tests/test_archive.py

swh/loader/package/cran/loader.py

swh/loader/package/loader.py

swh/loader/package/maven/loader.py

swh/loader/package/maven/tests/data/https_maven.org/sprova4j-0.1.0-sources.jar.sha1

swh/loader/package/maven/tests/data/https_maven.org/sprova4j-0.1.1-sources.jar.sha1

swh/loader/package/maven/tests/test_maven.py

swh/loader/package/npm/loader.py

swh/loader/package/opam/loader.py

swh/loader/package/opam/tests/test_opam.py

swh/loader/package/pubdev/loader.py

swh/loader/package/pubdev/tests/data/https_pub.dev/api_packages_Autolinker

swh/loader/package/pubdev/tests/data/https_pub.dev/api_packages_authentication

swh/loader/package/pubdev/tests/data/https_pub.dev/api_packages_bezier

swh/loader/package/pubdev/tests/data/https_pub.dev/api_packages_pdf

swh/loader/package/puppet/loader.py

swh/loader/package/puppet/tests/test_puppet.py

swh/loader/package/pypi/loader.py

Use tarball checksum to check download integrity in package loaders
5482a48ea1bd
Actions