SECURITY Signal 487
Google replaced Git tags for certain source code with obtaining via Google Drive
↗
Illustration only Photo by GHOSTY MEDIA on Unsplash
Google changed the distribution method for some of its source code, moving from Git tag references to files hosted on Google Drive.
Engineers who fetch this code will need to adjust scripts that expect Git tags, potentially rewriting automation to download from Drive. The shift also changes the trust model, as Drive links may rely on different access controls than Git repositories. Any build or audit process that verifies code integrity will have to account for the new source location.
Written by elseif from the cluster below · every claim links back to a sourceThe three things worth knowing
Git tag references for some code have been removed in favor of Google Drive links.
Automation that pulls code via Git will no longer work for the affected repositories.
Access to the code now depends on Google Drive permissions rather than Git repository settings.
THE CLUSTER