Sha checking remote task files ? #2194
-
|
Is there Sha checking to validate the remote files ? Would be more secure in terms of trust . I have them on Cloudflare R2 at the moment. The GitHub action uploads them in CI |
Beta Was this translation helpful? Give feedback.
Replies: 2 comments 2 replies
-
|
This sounds like a reasonable (good) extension to the existing behavior; if the calculated checksum does not match the expected checksum then do not run the task - a variation on the second case below. |
Beta Was this translation helpful? Give feedback.
-
|
thats basically it yes. the Sha will need to be saved with the remote task file though ? so its annoying for some devs as you have to keep the Sha up to date. |
Beta Was this translation helpful? Give feedback.
-
|
#2222 check that issue |
Beta Was this translation helpful? Give feedback.
-
|
I think we can close this ?? |
Beta Was this translation helpful? Give feedback.
This sounds like a reasonable (good) extension to the existing behavior; if the calculated checksum does not match the expected checksum then do not run the task - a variation on the second case below.
https://taskfile.dev/experiments/remote-taskfiles/#security