freedomofpress / securethenews

An automated scanner and web dashboard for tracking TLS deployment across news organizations
https://securethe.news
GNU Affero General Public License v3.0
102 stars 25 forks source link

Enable pip hash-checking mode #215

Closed chigby closed 4 years ago

chigby commented 4 years ago
  1. Require hashes whenever using pip install
  2. Generate hashes when compiling our requirements files from .in to .txt
  3. Separate GitHub-hosted dependencies from PyPI hosted dependencies.

Refs freedomofpress/fpf-www-projects/issues/74