Skip to content

security: add optional archive integrity verification#249

Open
pa4uslf wants to merge 27 commits intoFujiwaraChoki:mainfrom
pa4uslf:security/archive-integrity-check
Open

security: add optional archive integrity verification#249
pa4uslf wants to merge 27 commits intoFujiwaraChoki:mainfrom
pa4uslf:security/archive-integrity-check

Conversation

@pa4uslf
Copy link
Copy Markdown

@pa4uslf pa4uslf commented Apr 8, 2026

Summary

  • add optional SHA256 verification for downloaded scraper archives
  • expose checksum setting in config helpers and example config
  • fail fast when the downloaded archive does not match the expected checksum

Validation

  • ran python3 -m py_compile src/config.py src/classes/Outreach.py

@pa4uslf
Copy link
Copy Markdown
Author

pa4uslf commented Apr 8, 2026

已完成本地安全修复与针对性验证,欢迎直接 review。

如果你愿意,我也可以继续补一轮更深入的依赖/动态扫描证据。

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant