matrix/element-web
1
0
Fork 0
mirror of https://github.com/element-hq/element-web.git synced 2025-11-26 21:23:26 +03:00
Code Activity

Verify PGP signatures on tarballs when deploying

Browse Source
This commit is contained in:
Richard van der Hoff
2017-01-18 21:51:49 +00:00
parent 5206410f21
commit d1fbbf90c0
2 changed files with 36 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
scripts/redeploy.py
View File

@@ -214,6 +214,12 @@ if __name__ == "__main__":
deployer.should_clean = args.clean
deployer.config_location = args.config
# we don't pgp-sign jenkins artifacts; instead we rely on HTTPS access to
# the jenkins server (and the jenkins server not being compromised and/or
# github not serving it compromised source). If that's not good enough for
# you, don't use riot.im/develop.
deployer.verify_signature = False
if args.tarball_uri is not None:
build_dir = os.path.join(arg_extract_path, "test-%i" % (time.time()))
deploy_tarball(args.tarball_uri, build_dir)