Files
sbt/util-cache
Stas Shevchenko 38b73189ef [2.x] fix: Verify remote cache blobs against their digest (#9643)
Blobs pulled from a gRPC remote cache were written to the CAS and synced into the build without re-hashing, so a compromised cache server or plaintext MITM could substitute bytes under the requested digest. Re-hash remote blobs on write and reject on mismatch, and warn when a plaintext grpc:// endpoint is configured.
2026-08-20 12:17:24 -04:00
..
2017-04-17 10:24:54 -04:00