[DevTools] Protect against tampered dependencies

Add sha256 checksums to requirements.txt to protect against tampered PyPi dependencies.

Bug: 1257945
Change-Id: Ia0331fc93fe757ab697a6e1f0fcf262cf575b58a
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/tools/chrome-devtools-frontend/+/3310105
Reviewed-by: Michael Achenbach <[email protected]>
Commit-Queue: Michael Achenbach <[email protected]>
Auto-Submit: Alexander Schulze <[email protected]>
3 files changed
tree: 4451c93e9de66c381ae03ac5a475284b2c1ab05b
  1. gae/
  2. gae_py3/
  3. gce/
  4. .gitignore
  5. codereview.settings
  6. OWNERS
  7. README.md
  8. WATCHLISTS
  9. whitespace.txt
README.md

This repo contains:

  • the infra for serving the devtools frontend from appengine (gae), written in python 2

  • the infra for uploading new frontend assets to GCS (gce).

  • the infra for serving the devtools frontend from appengine (gae_py3), migrated to python 3

The projects gae and gce will be deprecated when the transition from py2 to py3 is completed.

See go/devtools-uploader for details.