Damnnnn... Looks like I'm going to have to add hashes for my dependencies. https... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		Uptrenda on April 15, 2023 \| parent \| context \| favorite \| on: Remote code execution vulnerability in Google they... Damnnnn... Looks like I'm going to have to add hashes for my dependencies. https://pip.pypa.io/en/stable/cli/pip_hash/ Apparently the format looks like this for a requirements.txt file: # sha256: L9XU_-gfdi3So-WEctaQoNu6N2Z3ZQYAOu4-16qor-8 drf-compound-fields==0.2.0

remram on April 15, 2023 [–]

I don't know where you got that from, it actually looks like this:

    FooProject == 1.2 --hash=sha256:2cf24dba5fb0a30e26e83b2ac5b9e29e1b161e5c1fa7425e73043362938b9824

Follow the link "Hash-checking Mode" from the page you linked.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact