Skip to content

The build.gradle in the templates should not pull in unversioned, remote code #7

@plambert

Description

@plambert

From src/main/resources/templates/script-plugin/filecopier/build.gradle.template:

apply from: 'https://raw.githubusercontent.com/rundeck-plugins/build-zip/master/build.gradle'

Every time we update that file in github, it is no longer possible for users to build their plugins from the same original source.

Also, if their build system does not have external internet access, the build can never succeed, unless they figure out how to cache this code somewhere that gradle will find and use it--I'm not sure if that's possible?

We should, as part of building this tool, include a static, versioned copy of all required code to ensure that the results of what it builds are deterministic and cannot be compromised without leaving a clear trace.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions