diff options
| author | Adin Scannell <ascannell@google.com> | 2021-01-07 15:28:41 -0800 |
|---|---|---|
| committer | gVisor bot <gvisor-bot@google.com> | 2021-01-07 15:30:37 -0800 |
| commit | 77b340ce82230e4e0bded01f43232c708328cd7e (patch) | |
| tree | d098a443ba2a49718f2d07d8b62b99b79e572e2b /WORKSPACE | |
| parent | 04b37c822022c27cb144e4af5ef21043a74127f3 (diff) | |
Require specific buckets for pprof handler.
This further restricts the surface exposed only to artifacts
generated by the continuous integration system.
This change also installs appropriate root certificates, so
that objects can be fetched from https://storage.googleapis.com.
PiperOrigin-RevId: 350650197
Diffstat (limited to 'WORKSPACE')
| -rw-r--r-- | WORKSPACE | 11 |
1 files changed, 11 insertions, 0 deletions
@@ -1,6 +1,17 @@ load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive", "http_file") load("@bazel_tools//tools/build_defs/repo:git.bzl", "git_repository") +# Root certificates. +# +# Note that the sha256 hash is ommitted here intentionally. This should not be +# used in any part of the build other than as certificates present in images. +http_file( + name = "google_root_pem", + urls = [ + "https://pki.goog/roots.pem" + ], +) + # Bazel/starlark utilities. http_archive( name = "bazel_skylib", |