Require the use of version specific download URLs (#769)

* Require the use of version specific download URLs

Download paths should point to the binary that matches the version number and hash mentioned in the manifest and the guidelines should reflect that clearly. 
Generic paths that point to whatever happens to be the latest version causes the hash verification system to fail.

* Update README.md

URL is Pascal Case in the manifest.

Co-authored-by: Kevin Larkin (MS) <kevinla@microsoft.com>
Co-authored-by: denelon <denelon@microsoft.com>
This commit is contained in:
Jasper Weiss
2020-06-30 17:57:24 +02:00
committed by GitHub
parent 6ff08af9a8
commit 3714fe81d4

View File

@@ -32,7 +32,7 @@ License: string # the open source license or copyright
InstallerType: string # enumeration of supported installer types (exe, msi, msix, inno, wix, nullsoft, appx)
Installers:
- Arch: string # enumeration of supported architectures
Url: string # path to download installation file
Url: string # path to download installation file of the specified version
Sha256: string # SHA256 calculated from installer
# ManifestVersion: 0.1.0
```
@@ -84,4 +84,3 @@ contact [opencode@microsoft.com](mailto:opencode@microsoft.com) with any additio
For the avoidance of doubt, you may not make any Submissions linking to third party materials if such
Submission is prohibited by the applicable third party and/or otherwise violates such third party's rights.