mirror of
https://github.com/retroSoC/retroSoC.git
synced 2026-11-06 22:55:14 +00:00
16 lines
565 B
Markdown
16 lines
565 B
Markdown
# Locked Configuration Inputs
|
|
|
|
`dependencies.lock.json` is the source of truth for external repositories,
|
|
archives, checksums, and CI tool bundles. Its digest contributes to every build
|
|
variant identity.
|
|
|
|
Do not add direct downloads to setup scripts or workflow YAML. Update the lock
|
|
with a full Git revision or verified SHA-256 checksum, validate it with:
|
|
|
|
```sh
|
|
python3 scripts/dependency_lock.py --lock config/dependencies.lock.json
|
|
```
|
|
|
|
Then run the affected setup, doctor, test, and regression flow described in
|
|
[Engineering Workflow](../docs/engineering.md).
|