This is an automated email from the ASF dual-hosted git repository.
karthikz pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/incubator-heron.git
The following commit(s) were added to refs/heads/master by this push:
new 56bcc6d Add sha256 checksums for all http_archives (#2856)
56bcc6d is described below
commit 56bcc6d4139a8d64fd6c84d40b0785b1f8c177cb
Author: Andrew Jorgensen <ajorgen...@users.noreply.github.com>
AuthorDate: Sat Apr 7 12:03:04 2018 -0400
Add sha256 checksums for all http_archives (#2856)
I have taken the current sha256 checksum for all of the workspace
archives so we can verify their signature on download. Since some
of the artifacts are downloaded over http, we want to make sure
there was no man in the middle attack done to change the resulting
binary. This also gives assurance that the code we are downloading
has not been tampered with in any way either over the wire or at
the source.
---
WORKSPACE | 23 ++++++++++++++++++++---
1 file changed, 20 insertions(+), 3 deletions(-)
diff --git a/WORKSPACE b/WORKSPACE
index 0e87770..c0c40bb 100644
--- a/WORKSPACE
+++ b/WORKSPACE
@@ -792,7 +792,8 @@ new_http_archive(
" data = glob(['**/*']),",
" visibility = ['//visibility:public'],",
")",
- ])
+ ]),
+ sha256 =
"02f8102c2436bb03b3ee6dede1919d1dac8a427541652e5ec95171ec8adbc93a",
)
# end pex repos
@@ -801,6 +802,7 @@ http_archive(
name = "com_google_protobuf",
urls = ["https://github.com/google/protobuf/archive/v3.4.1.tar.gz";],
strip_prefix = "protobuf-3.4.1",
+ sha256 =
"8e0236242106e680b4f9f576cc44b8cd711e948b20a9fc07769b0a20ceab9cc4",
)
# end protobuf dependencies for C++ and Java
@@ -809,6 +811,7 @@ http_archive(
name = "com_github_gflags_gflags",
urls = ["https://github.com/gflags/gflags/archive/v2.2.1.tar.gz";],
strip_prefix = "gflags-2.2.1",
+ sha256 =
"ae27cdbcd6a2f935baa78e4f21f675649271634c092b1be01469440495609d0e",
)
new_http_archive(
@@ -816,6 +819,7 @@ new_http_archive(
urls =
["https://github.com/libevent/libevent/releases/download/release-2.1.8-stable/libevent-2.1.8-stable.tar.gz";],
strip_prefix = "libevent-2.1.8-stable",
build_file = "third_party/libevent/libevent.BUILD",
+ sha256 =
"965cc5a8bb46ce4199a47e9b2c9e1cae3b137e8356ffdad6d94d3b9069b71dc2",
)
new_http_archive(
@@ -823,6 +827,7 @@ new_http_archive(
urls =
["http://download.savannah.nongnu.org/releases/libunwind/libunwind-1.1.tar.gz";],
strip_prefix = "libunwind-1.1",
build_file = "third_party/libunwind/libunwind.BUILD",
+ sha256 =
"9dfe0fcae2a866de9d3942c66995e4b460230446887dbdab302d41a8aee8d09a",
)
new_http_archive(
@@ -834,6 +839,7 @@ new_http_archive(
],
strip_prefix = "zookeeper-3.4.10",
build_file = "third_party/zookeeper/zookeeper.BUILD",
+ sha256 =
"7f7f5414e044ac11fee2a1e0bc225469f51fb0cdf821e67df762a43098223f27",
)
new_http_archive(
@@ -841,6 +847,7 @@ new_http_archive(
urls =
["https://github.com/gperftools/gperftools/releases/download/gperftools-2.4/gperftools-2.4.tar.gz";],
strip_prefix = "gperftools-2.4",
build_file = "third_party/gperftools/gperftools.BUILD",
+ sha256 =
"982a37226eb42f40714e26b8076815d5ea677a422fb52ff8bfca3704d9c30a2d",
)
new_http_archive(
@@ -848,6 +855,7 @@ new_http_archive(
urls = ["https://github.com/google/glog/archive/v0.3.5.tar.gz";],
strip_prefix = "glog-0.3.5",
build_file = "third_party/glog/glog.BUILD",
+ sha256 =
"7580e408a2c0b5a89ca214739978ce6ff480b5e7d8d7698a2aa92fadc484d1e0",
)
new_http_archive(
@@ -855,6 +863,7 @@ new_http_archive(
urls =
["https://github.com/google/googletest/archive/release-1.8.0.tar.gz";],
strip_prefix = "googletest-release-1.8.0",
build_file = "third_party/gtest/gtest.BUILD",
+ sha256 =
"58a6f4277ca2bc8565222b3bbd58a177609e9c488e8a72649359ba51450db7d8",
)
new_http_archive(
@@ -862,6 +871,7 @@ new_http_archive(
urls = ["https://github.com/USCiLab/cereal/archive/v1.2.2.tar.gz";],
strip_prefix = "cereal-1.2.2",
build_file = "third_party/cereal/cereal.BUILD",
+ sha256 =
"1921f26d2e1daf9132da3c432e2fd02093ecaedf846e65d7679ddf868c7289c4",
)
new_http_archive(
@@ -869,6 +879,7 @@ new_http_archive(
urls =
["https://storage.googleapis.com/heron-packages/yaml-cpp-noboost.tar.gz";],
strip_prefix = "yaml-cpp-noboost",
build_file = "third_party/yaml-cpp/yaml.BUILD",
+ sha256 =
"87684ea7a640733e2fe2f753348e306a6764c88fe3f30518c3273e367ff3d17b",
)
# end 3rdparty C++ dependencies
@@ -878,6 +889,7 @@ new_http_archive(
url =
"https://storage.googleapis.com/kubernetes-helm/helm-v2.7.2-darwin-amd64.tar.gz";,
strip_prefix = "darwin-amd64",
build_file = "third_party/helm/helm.BUILD",
+ sha256 =
"5058142bcd6e16b7e01695a8f258d27ae0b6469caf227ddf6aa2181405e6aa8e",
)
new_http_archive(
@@ -885,6 +897,7 @@ new_http_archive(
url =
"https://storage.googleapis.com/kubernetes-helm/helm-v2.7.2-linux-amd64.tar.gz";,
strip_prefix = "linux-amd64",
build_file = "third_party/helm/helm.BUILD",
+ sha256 =
"9f04c4824fc751d6c932ae5b93f7336eae06e78315352aa80241066aa1d66c49",
)
# end helm
@@ -893,6 +906,7 @@ http_archive(
name = "io_bazel_rules_docker",
urls =
["https://github.com/bazelbuild/rules_docker/archive/v0.4.0.tar.gz";],
strip_prefix = "rules_docker-0.4.0",
+ sha256 =
"6dede2c65ce86289969b907f343a1382d33c14fbce5e30dd17bb59bb55bb6593",
)
load(
@@ -913,17 +927,19 @@ container_pull(
)
# end docker image building
-# for nomad repo
+# for nomad repear
new_http_archive(
name = "nomad_mac",
urls =
["https://releases.hashicorp.com/nomad/0.7.0/nomad_0.7.0_darwin_amd64.zip";],
build_file = "third_party/nomad/nomad.BUILD",
+ sha256 =
"53452f5bb27131f1fe5a5f9178324511bcbc54e4fef5bec4e25b049ac38e0632",
)
new_http_archive(
name = "nomad_linux",
urls =
["https://releases.hashicorp.com/nomad/0.7.0/nomad_0.7.0_linux_amd64.zip";],
build_file = "third_party/nomad/nomad.BUILD",
+ sha256 =
"b3b78dccbdbd54ddc7a5ffdad29bce2d745cac93ea9e45f94e078f57b756f511",
)
# scala integration
@@ -933,7 +949,8 @@ http_archive(
name = "io_bazel_rules_scala",
url =
"https://github.com/bazelbuild/rules_scala/archive/%s.zip"%rules_scala_version,
type = "zip",
- strip_prefix= "rules_scala-%s" % rules_scala_version
+ strip_prefix= "rules_scala-%s" % rules_scala_version,
+ sha256 =
"bd66b178da5b9b6845f677bdfb2594de8f1050f831a8d69527c6737969376065",
)
load("@io_bazel_rules_scala//scala:scala.bzl", "scala_repositories")
--
To stop receiving notification emails like this one, please contact
karth...@apache.org.
