aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--Library/Homebrew/dev-cmd/audit.rb5
1 files changed, 5 insertions, 0 deletions
diff --git a/Library/Homebrew/dev-cmd/audit.rb b/Library/Homebrew/dev-cmd/audit.rb
index 12eaf9167..2c5fdcc95 100644
--- a/Library/Homebrew/dev-cmd/audit.rb
+++ b/Library/Homebrew/dev-cmd/audit.rb
@@ -1288,6 +1288,11 @@ class ResourceAuditor
problem "Please use https:// for #{u}"
end
+ # Check for master branch GitHub archives.
+ urls.grep(%r{^https://github\.com/.*archive/master\.(tar\.gz|zip)$}) do
+ problem "Use versioned rather than branch tarballs for stable checksums."
+ end
+
# Use new-style archive downloads
urls.each do |u|
next unless u =~ %r{https://.*github.*/(?:tar|zip)ball/} && u !~ /\.git$/