Skip to content

Allow disabling of GPG / Checksum check for all tools #445

@david-forster10

Description

@david-forster10

Is your feature request related to a problem? Please describe.
When using an Artifactory mirror in an restricted environment, the Artifactory instance is pointing at https://releases.hashicorp.com/ however it scans resources on pull, it is successfully pulling Terraform archives, but is blocking checksum files.

Error received from tenv:

Error: file sha256 checksum not found for current platform

Describe the solution you'd like
Allow the option to disable checksum validation.

Describe alternatives you've considered

Additional context
As standard checksum validation should be enabled, and advice should be given to not disable Checksum validation, however for the rare instance it's needed, this should be a configurable option.

Metadata

Metadata

Assignees

Labels

enhancementNew feature or request

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions