Use non-root install by default

actions / setup-dotnet

Set up your GitHub Actions workflow with a specific version of the .NET core sdk

MIT License

919 stars 452 forks source link

Use non-root install by default #486

Open SS1823 opened 7 months ago

SS1823 commented 7 months ago

Description: Non-root install in tool cache using Microsoft provided binary archives.

Justification: self-shosted runners should be run as non-privileged user for security. The action is unable to install dotnet without hacks, that are hard to maintain.

Are you willing to submit a PR? I can try.

dusan-trickovic commented 7 months ago

Hello, @SS1823 ! Thank you for your suggestion, we will take into consideration and see what can be done :)

SS1823 commented 7 months ago

btw, there's https://dotnetcli.blob.core.windows.net/dotnet/release-metadata/releases-index.json API and additionally each release has own release.json endpoint, along with all the .zip/tar.gz urls