Skip to content

exclude GIT_SSL_NO_VERIFY env variable from getting stripped#1293

Merged
asottile merged 1 commit intopre-commit:masterfrom
schiermike:master
Jan 21, 2020
Merged

exclude GIT_SSL_NO_VERIFY env variable from getting stripped#1293
asottile merged 1 commit intopre-commit:masterfrom
schiermike:master

Conversation

@schiermike
Copy link
Copy Markdown
Contributor

Can this change please get merged? We sit behind a proxy that messes with certificates...

@asottile
Copy link
Copy Markdown
Member

that's actually kinda terrifying -- doesn't this variable expose you to all sorts of malicious MITM?

I'm looking into why windows CI is failing -- I suspect a bad azure pipelines release :(

@asottile
Copy link
Copy Markdown
Member

@schiermike
Copy link
Copy Markdown
Contributor Author

Yeah, a bit yes. The proxy itself is pretty restricting and only allows connections to a handful of public domains such as github.com - and it does verify certs. So it's only a matter of trusting the path to the proxy inside the company network ...

Copy link
Copy Markdown
Member

@asottile asottile left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

change seems fine (though scary!), I'll merge after fixing CI

@asottile asottile merged commit 627c9eb into pre-commit:master Jan 21, 2020
@asottile
Copy link
Copy Markdown
Member

this has been released as part of v2.0.0 -- thanks again for the patch!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

2 participants