https://github.com/rust-lang/rust http://git.dreamy.place/mirrors/rust/atom?h=cargo_update 2024-12-04T22:03:44+00:00 2024-12-04T22:03:44+00:00 Jakub Beránek berykubik@gmail.com 2024-12-04T22:02:25+00:00 urn:sha1:536516f949ff37b0e10eaed835c2d3592d03e576 2023-06-17T00:56:01+00:00 Trevor Gross tmgross@umich.edu 2023-06-10T16:06:17+00:00 urn:sha1:22d00dcd47e0b8e18eb254966750fb523c726e4e 2019-08-12T08:31:35+00:00 Pietro Albini pietro@pietroalbini.org 2019-08-12T07:41:06+00:00 urn:sha1:eb832b2a3244166c81d8e00d94805525f3bd7526 Currently mirrors are stored in the rust-lang-ci2 S3 bucket along with CI toolchains. This is problematic for multiple reasons: - CI IAM credentials are allowed to both edit and delete those files. A malicious user gaining access to those credentials would be able to change our mirrored dependencies, possibly backdooring the compiler. - Contents of the rust-lang-ci2 bucket are disposable except for the mirrors' content. When we implement backups for S3 buckets we'd have to replicate just that part of the bucket, complicating the backup logic and increasing the chance of mistakes. A standalone bucket will be way easier to backup. This commit switches our CI to use the new rust-lang-ci-mirrors bucket. 2019-04-12T20:18:48+00:00 Pietro Albini pietro@pietroalbini.org 2019-04-12T20:07:13+00:00 urn:sha1:4e920f2b04d61e2e54a080423bd766c5df1a97c8