diff options
| author | chouseknecht <chouseknecht@ansible.com> | 2016-03-04 08:08:04 -0500 |
|---|---|---|
| committer | chouseknecht <chouseknecht@ansible.com> | 2016-03-04 08:08:04 -0500 |
| commit | 11c18141461d21a99815fb69eef61ca526c6d140 (patch) | |
| tree | a0c5c9cfb07f77f3f2b6a2fa9efe096f6cfafee9 /docs | |
| parent | fa630872d9f511b5ea2b53f71468b7963bbf586a (diff) | |
| download | ansible-11c18141461d21a99815fb69eef61ca526c6d140.tar.gz | |
14604 - Adding suggested comments related to securing Galaxy role versions
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/proposals/auto-install-roles.md | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/docs/proposals/auto-install-roles.md b/docs/proposals/auto-install-roles.md index b63349bb30..9fb17fc2b1 100644 --- a/docs/proposals/auto-install-roles.md +++ b/docs/proposals/auto-install-roles.md @@ -125,6 +125,7 @@ Here's the approach: 'name': 'repo’ } ``` +- For roles installed from Galaxy, Galaxy should provide some measure of security against version change. Galaxy should track the commit related to a version. If the role owner changes historical versions (today tags) and thus changes the commit hash, the affected version would become un-installable. - Refactor the install process to encompass the following : |