kennethreitz/heroku-buildpack-python
1
0
Fork 0
mirror of https://github.com/kennethreitz/heroku-buildpack-python.git synced 2026-06-05 23:10:16 +00:00
Code Issues Packages Projects Releases Wiki Activity

update get-pip to look for sha

Browse Source
This commit is contained in:
Casey Faist
2019-09-11 16:36:48 -07:00
parent c3328f57dd
commit a2f3ff7a35
1 changed files with 12 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
bin/steps/python
+12 -5
View File
@@ -101,10 +101,17 @@ fi
# https://github.com/pypa/get-pip
GETPIP="https://lang-python.s3.amazonaws.com/etc/get-pip.py"
if ! curl "${GETPIP}" -o "$ROOT_DIR/get-pip.py"; then
mcount "failure.python.get-pip"
echo "Failed to pull down get-pip"
exit 1
# Grab SHA from get-pip
CHECK_SHA="$(curl -s "$GETPIP" | sha256sum | cut -d ' ' -f 1)"
# validate the sha is the same one we want
if [ ! "$CHECK_SHA" == "$GETPIP_SHA" ]; then
mcount "failure.python.get-pip.wrong-sha"
echo "Incorrect SHA found"
exit 1
else
curl "$GETPIP" -o "$ROOT_DIR/get-pip.py"
mcount "python.get-pip.install"
fi
# If Pip isn't up to date:
@@ -116,7 +123,7 @@ if [ "$FRESH_PYTHON" ] || [[ ! $(pip --version) == *$PIP_UPDATE* ]]; then
rm -fr /app/.heroku/python/lib/python*/site-packages/pip-*
rm -fr /app/.heroku/python/lib/python*/site-packages/setuptools-*
/app/.heroku/python/bin/python "$ROOT_DIR/get-pip.py" pip=="$PIP_UPDATE" &> /dev/null
/app/.heroku/python/bin/python "$ROOT_DIR/get-pip.py" pip=="$PIP_UPDATE" #&> /dev/null
/app/.heroku/python/bin/pip install "$ROOT_DIR/vendor/setuptools-39.0.1-py2.py3-none-any.whl" &> /dev/null
fi