3 ms·
Nixpkgs’s fetchFromGitHub function hashes the contents of GitHub archives after unpacking, so it’s unaffected.
by anderskaseorg 4y ago
Nixpkgs’s fetchFromGitHub function hashes the contents of GitHub archives after unpacking, so it’s unaffected.
- pxc 4y agoI should have remembered this! Nixpkgs committers are consistently mindful of things like this in code reviews.