You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The Dragonwell Dockerfile downloads and installs the Dragonwell software without
verifying its integrity. The integrity should be verified using a hashsum like SHA256 to
ensure the integrity of the download, and ensure that the system is receiving the same
data across multiple downloads.
See ToB report for further details.
The text was updated successfully, but these errors were encountered:
Found as part of TrailOfBits Audit:
Ref: TOB-TEMURIN-6
The Dragonwell Dockerfile downloads and installs the Dragonwell software without
verifying its integrity. The integrity should be verified using a hashsum like SHA256 to
ensure the integrity of the download, and ensure that the system is receiving the same
data across multiple downloads.
See ToB report for further details.
The text was updated successfully, but these errors were encountered: