mad-star-studio/element-web
2
0
Fork 0
Code Pull requests Activity

Verify PGP signatures on tarballs when deploying

Browse source
This commit is contained in:
Richard van der Hoff 2017-01-18 21:51:49 +00:00
parent 5206410f21
commit d1fbbf90c0
2 changed files with 36 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

6
scripts/redeploy.py
View file

@ -214,6 +214,12 @@ if __name__ == "__main__":
deployer.should_clean = args.clean
deployer.config_location = args.config
# we don't pgp-sign jenkins artifacts; instead we rely on HTTPS access to
# the jenkins server (and the jenkins server not being compromised and/or
# github not serving it compromised source). If that's not good enough for
# you, don't use riot.im/develop.
deployer.verify_signature = False
if args.tarball_uri is not None:
build_dir = os.path.join(arg_extract_path, "test-%i" % (time.time()))
deploy_tarball(args.tarball_uri, build_dir)