(chore) Adapt recommended composer install script into our setup to remove the static hash comparison
0/1 thread resolved
changed milestone to %sprint: Modest Monkey
added Priority::2 - Normal Squad::Blue Status::InProgress Type::Chore scoped labels
approved this merge request
approved this merge request
added 3 commits
- d01c821b...14f32dc5 - 2 commits from branch
master
- bc2f027b - Merge branch 'master' into 815-composer-setup
- d01c821b...14f32dc5 - 2 commits from branch
approved this merge request
4 4 rm -rf ../vendor 5 5 6 6 # Setup composer 7 EXPECTED_SIGNATURE="$(wget -q -O - https://composer.github.io/installer.sig)" - Owner
Should installer.sig not be saved to our repo or CI? If composer repo is compromised then we could be vulnerable to installing a bad version.
added MR::Requires Changes scoped label