audit: check for master branch tar/zipballs.
These have unstable checksums and aren't the tagged, stable releases we require.
This commit is contained in:
parent
0c140f0970
commit
337810bf3e
@ -1288,6 +1288,11 @@ class ResourceAuditor
|
|||||||
problem "Please use https:// for #{u}"
|
problem "Please use https:// for #{u}"
|
||||||
end
|
end
|
||||||
|
|
||||||
|
# Check for master branch GitHub archives.
|
||||||
|
urls.grep(%r{^https://github\.com/.*archive/master\.(tar\.gz|zip)$}) do
|
||||||
|
problem "Use versioned rather than branch tarballs for stable checksums."
|
||||||
|
end
|
||||||
|
|
||||||
# Use new-style archive downloads
|
# Use new-style archive downloads
|
||||||
urls.each do |u|
|
urls.each do |u|
|
||||||
next unless u =~ %r{https://.*github.*/(?:tar|zip)ball/} && u !~ /\.git$/
|
next unless u =~ %r{https://.*github.*/(?:tar|zip)ball/} && u !~ /\.git$/
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user