From 8eb6b23de4470d6a8da3131650d6a67514dfa130 Mon Sep 17 00:00:00 2001 From: Ryan Kuester Date: Fri, 1 Nov 2024 17:10:05 -0500 Subject: [PATCH] build(bazel): add integrity check to nnlib_hifi4 download (#2743) build(bazel): add integrity check to nnlib_hifi4 download Add an integrity check to the http_archive() download of nnlib_hifi4 in order to make the build more hermetic, reduce the security risk that a remote file changes, and silence the noisy warning on the console during the build: DEBUG: Rule 'nnlib_hifi4' indicated that a canonical reproducible form can be obtained by modifying arguments integrity[....] BUG=description --- WORKSPACE | 1 + 1 file changed, 1 insertion(+) diff --git a/WORKSPACE b/WORKSPACE index e50f8cb0eef..cc6c1a83d72 100644 --- a/WORKSPACE +++ b/WORKSPACE @@ -101,6 +101,7 @@ py_pkg_cc_deps( http_archive( name = "nnlib_hifi4", build_file = "@tflite_micro//third_party/xtensa/nnlib_hifi4:nnlib_hifi4.BUILD", + integrity = "sha256-ulZ+uY4dRsbDUMZbZtD972eghclWQrqYRb0Y4Znfyyc=", strip_prefix = "nnlib-hifi4-34f5f995f28d298ae2b6e2ba6e76c32a5cb34989", urls = ["https://github.com/foss-xtensa/nnlib-hifi4/archive/34f5f995f28d298ae2b6e2ba6e76c32a5cb34989.zip"], )