fallintoplace opened a new pull request, #908: URL: https://github.com/apache/arrow-go/pull/908
## Summary - Pin to a fixed Apache RAT version check and verify its SHA-512 checksum before running - Add committed checksum file - Fail fast if checksum missing or mismatched to avoid executing unverified jars ## Testing - Not run (release helper script hardening change only). -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
