Closed DTMad closed 4 years ago
@nebhale - sorry to harass you - we're wondering if you could find the time to look at this. Our sec / ops team had some concerns here since using http headers won't leave tokens in log files. We tried to understand how to modify the code ourselves, but need a hand.
As we're closing in on the migration to Cloud Native Buildpacks, we're not going to make any change this invasive to the main buildpack. The code that all downloads route through is located here, but beware that any modification to this area of code is unsupported and bugs against buildpacks with modifications against non-public API (that's what this is) will not be investigated.
We would like to provide http headers when using the download function (e.g. change User-Agent, provide additional headers, ...) to get more detailed information.
Please provide an option to make this possible.