Abdessamad Derraz d16f8fd17a fix: accept downloads by cryptographic hash only ...

A crc32 and a size can be met by crafted bytes, so a remote download
matched on them could land in bios/. verify_content now requires every
sha256, sha1 and md5 the entry declares to match, and an entry declaring
none is reported as not verifiable from the network and nothing is
written. crc32 and size still find a file the database already holds.

2026-10-21 10:04:20 +02:00

..

adding-a-platform.md

chore: merge audit fixes (integrity)

2026-10-21 06:48:42 +02:00

adding-a-scraper.md

docs: state each verification rule once

2026-10-21 05:22:38 +02:00

advanced-usage.md

docs: state each verification rule once

2026-10-21 05:22:38 +02:00

architecture.md

chore: merge audit fixes (site)

2026-10-21 05:53:15 +02:00

community-tools.md

docs: write headings in sentence case

2026-10-20 06:16:00 +02:00

faq.md

docs: point users to --check and exact pack files

2026-10-21 04:34:04 +02:00

first-install.md

docs: refresh installer and release pages

2026-10-21 05:22:28 +02:00

getting-started.md

docs: point users to --check and exact pack files

2026-10-21 04:34:04 +02:00

index.md

docs: write prose without dashes or semicolons

2026-10-19 06:47:31 +02:00

installer.md

chore: merge audit fixes (installer)

2026-10-21 06:02:02 +02:00

profiling.md

chore: merge audit fixes (packcli)

2026-10-21 05:51:12 +02:00

release-process.md

feat: check the profiles a branch adds or edits

2026-10-21 06:09:55 +02:00

testing-guide.md

chore: merge audit fixes (integrity)

2026-10-21 06:48:42 +02:00

tools.md

fix: accept downloads by cryptographic hash only

2026-10-21 10:04:20 +02:00

troubleshooting.md

chore: merge audit fixes (docs)

2026-10-21 05:50:25 +02:00

verification-modes.md

docs: state each verification rule once

2026-10-21 05:22:38 +02:00