Skip to content

Commit 6125474

Browse files
committed
Fix PHP Composer installer
Release v0.1.1 is broken, because the PHP Composer installer has changed and the checksum was hardcoded. Fix: always grep most recent installer's SHA384 checksum from https://composer.github.io/installer.sig
1 parent 712cd6b commit 6125474

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

Dockerfile

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -192,7 +192,7 @@ RUN \
192192

193193
# Install PHP composer
194194
php -r "copy('https://getcomposer.org/installer', 'composer-setup.php');" && \
195-
php -r "if (hash_file('SHA384', 'composer-setup.php') === 'aa96f26c2b67226a324c27919f1eb05f21c248b987e6195cad9690d5c1ff713d53020a02ac8c217dbf90a7eacc9d141d') { echo 'Installer verified'; } else { echo 'Installer corrupt'; unlink('composer-setup.php'); } echo PHP_EOL;" && \
195+
php -r "if (hash_file('SHA384', 'composer-setup.php') === trim(file_get_contents('https://composer.github.io/installer.sig'))) { echo 'Installer verified'; } else { echo 'Installer corrupt'; unlink('composer-setup.php'); } echo PHP_EOL;" && \
196196
php composer-setup.php --install-dir=/usr/local/bin --filename=composer && \
197197
php -r "unlink('composer-setup.php');" && \
198198

0 commit comments

Comments
 (0)