| commit | 06d79dd21801caca08bda3c281c7bba04dbcdbb7 | [log] [tgz] |
|---|---|---|
| author | Jingwen Chen <jingwen@google.com> | Mon Aug 26 06:19:53 2019 -0700 |
| committer | Copybara-Service <copybara-worker@google.com> | Mon Aug 26 06:20:59 2019 -0700 |
| tree | feca479aee5fa47565c1750abdbf40ef1eb5a47f | |
| parent | 532778d174c9126676394c71f58f66e86437fb7b [diff] |
Wire up --incompatible_disallow_unverified_http_downloads for maven_server Force usage of either HTTPS or HTTP w/ SHA-1. Note that SHA-1 is still susceptible to collision attacks, but this should reduce the exploitable surface of the current implementation that allows plain HTTP without checksums. Also see https://github.com/bazelbuild/bazel/issues/6799#issuecomment-524382068 Closes #9235. RELNOTES: `maven_jar` and `maven_server` now disallow using plain HTTP URLs without a specified checksum. If you are still using `maven_jar`, consider migrating to [`rules_jvm_external`](https://github.com/bazelbuild/rules_jvm_external) for transitive dependency management. See [#8607](https://github.com/bazelbuild/bazel/issues/8607) for more information. Change-Id: I61b96b1d797071dc84291fecbf05a45d927240a5 PiperOrigin-RevId: 265442213
{Fast, Correct} - Choose two
Build and test software of any size, quickly and reliably.
Speed up your builds and tests: Bazel only rebuilds what is necessary. With advanced local and distributed caching, optimized dependency analysis and parallel execution, you get fast and incremental builds.
One tool, multiple languages: Build and test Java, C++, Android, iOS, Go, and a wide variety of other language platforms. Bazel runs on Windows, macOS, and Linux.
Scalable: Bazel helps you scale your organization, codebase, and continuous integration solution. It handles codebases of any size, in multiple repositories or a huge monorepo.
Extensible to your needs: Easily add support for new languages and platforms with Bazel's familiar extension language. Share and re-use language rules written by the growing Bazel community.
Follow our tutorials:
See CONTRIBUTING.md
Bazel is released in ‘Beta’. See the product roadmap to learn about the path toward a stable 1.0 release.