Commit c003b8e
authored
NXP Backend: Use --index-url for eiq.nxp.com/repository (#13759)
### Summary
Avoid attack on PyPI index. If `--extra-index-url` is used there is an
attack vector when adversary publish a malicious package with same name
on pypi.org. And pip might pick the malicious package instead of one on
eiq.nxp.com/repository, as "there is no priority in the locations that
are searched" [https://pip.pypa.io/en/stable/cli/pip_install/]
Using --index-url eliminates this attack.
### Test plan
N/A1 parent 41730fa commit c003b8e
File tree
5 files changed
+9
-8
lines changed- .github/workflows
- backends/nxp
- examples/nxp
5 files changed
+9
-8
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
855 | 855 | | |
856 | 856 | | |
857 | 857 | | |
858 | | - | |
| 858 | + | |
| 859 | + | |
859 | 860 | | |
860 | 861 | | |
861 | 862 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
| 3 | + | |
| 4 | + | |
This file was deleted.
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
7 | 7 | | |
8 | 8 | | |
9 | 9 | | |
10 | | - | |
| 10 | + | |
0 commit comments