cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

How do we validate Package Feed Module setup files are safe?

How do we validate Package Feed Module setup files are safe?

We use a checksum to ensure the download is not modified in transit. We then scan them for viruses a second time (our partner also scans vendor setups for viruses). If a setup triggers a virus alert, we will not accept the update and host the file but will instead communicate with the vendor to resolve the issue. Because we are not wrapping or modifying vendor setups, any security signature applied by the vendor remains intact and can be leveraged to confirm it has not been tampered with.

Was this article helpful? Yes No
No ratings
Version history
Revision #:
2 of 2
Last update:
‎Sep 04, 2019 03:25 PM
Updated by:
 
Contributors