Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

curl download not recommended way to install tools #61

Closed
naveensrinivasan opened this issue Sep 6, 2021 · 1 comment
Closed

curl download not recommended way to install tools #61

naveensrinivasan opened this issue Sep 6, 2021 · 1 comment
Labels
documentation Improvements or additions to documentation question Further information is requested

Comments

@naveensrinivasan
Copy link

curl is an insecure pattern for downloading dependencies/tools.

curl -s https://raw.githubusercontent.com/armosec/kubescape/master/install.sh | /bin/bash

https://about.codecov.io/security-update/

Why not make a release with GitHub and have instructions to download with gpg signed releases? Also go install is another way to install this tool.
@dwertent dwertent added documentation Improvements or additions to documentation question Further information is requested labels Sep 9, 2021
@dwertent
Copy link
Contributor

dwertent commented Oct 3, 2021

Obviously you can directly download the binary or run go install, we wanted to provide a one liner installation.

@dwertent dwertent closed this as completed Oct 3, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
documentation Improvements or additions to documentation question Further information is requested
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@naveensrinivasan @dwertent