about summary refs log tree commit diff
path: root/src/libsyntax/parse/parser
diff options
context:
space:
mode:
authorPietro Albini <pietro@pietroalbini.org>2019-08-12 09:41:06 +0200
committerPietro Albini <pietro@pietroalbini.org>2019-08-12 10:31:35 +0200
commiteb832b2a3244166c81d8e00d94805525f3bd7526 (patch)
tree0d1326f72eb6279c5bf2f395840b0fb7fa28af74 /src/libsyntax/parse/parser
parent72f8043d44a8925e469daf5c10e2630c80c2a7d4 (diff)
downloadrust-eb832b2a3244166c81d8e00d94805525f3bd7526.tar.gz
rust-eb832b2a3244166c81d8e00d94805525f3bd7526.zip
ci: move mirrors to their standalone bucket
Currently mirrors are stored in the rust-lang-ci2 S3 bucket along with
CI toolchains. This is problematic for multiple reasons:

- CI IAM credentials are allowed to both edit and delete those files.
  A malicious user gaining access to those credentials would be able to
  change our mirrored dependencies, possibly backdooring the compiler.

- Contents of the rust-lang-ci2 bucket are disposable except for the
  mirrors' content. When we implement backups for S3 buckets we'd have
  to replicate just that part of the bucket, complicating the backup
  logic and increasing the chance of mistakes. A standalone bucket will
  be way easier to backup.

This commit switches our CI to use the new rust-lang-ci-mirrors bucket.
Diffstat (limited to 'src/libsyntax/parse/parser')
0 files changed, 0 insertions, 0 deletions