Merge pull request #91 from deadsnakes/check-from-deadsnakes

add a check to make sure the package came from deadsnakes
deadsnakes · Dec 4, 2022 · e1eb441 · e1eb441
2 parents f0f0ef3 + 51f089a
commit e1eb441
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 1 deletion.
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -10,7 +10,6 @@ jobs:
       matrix:
         include:
         - {python: '3.7', debug: true}
-        - {python: '3.10-dev', debug: false}
         - {python: '3.11-dev', debug: false}
         - {python: '3.12-dev', debug: false}
     steps:

diff --git a/bin/install-python b/bin/install-python
@@ -86,6 +86,17 @@ def main() -> int:
                 if _print_call(*cmd):
                     return 1
 
+    # check whether the installed package came from deadsnakes
+    out = subprocess.check_output(('apt-cache', 'policy', py)).decode()
+    seen = False
+    for line in out.splitlines():
+        if line.strip().startswith('*** '):
+            seen = True
+        elif seen and '/deadsnakes/' not in line:
+            raise SystemExit(f'package {py} is not from deadsnakes')
+        elif seen:
+            break
+
     with open(os.environ['GITHUB_PATH'], 'a') as fp:
         fp.write(f'{bindir}\n')