Skip to content

Verify downloaded pylint config checksum - #347

Open
sylvesterkaczmarek wants to merge 1 commit into
google-deepmind:mainfrom
sylvesterkaczmarek:fix-pylintrc-checksum
Open

sylvesterkaczmarek wants to merge 1 commit into
google-deepmind:mainfrom
sylvesterkaczmarek:fix-pylintrc-checksum

Conversation

@sylvesterkaczmarek

Copy link
Copy Markdown

Fixes #298.

Adds a pinned SHA-256 check for the downloaded Google OSS pylint config before the file is used by the test script. The verification uses Python's standard library, so it does not add another system utility dependency.

Verification:

  • bash -n test.sh
  • verified the current upstream config is accepted
  • verified a tampered config is rejected
  • the full local test.sh reaches pylint after the checksum check, then stops on two pre-existing line-length findings in multinomial.py and bernoulli.py

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add checksum verification for wget .pylintrc

1 participant