setup-dotnet icon indicating copy to clipboard operation
setup-dotnet copied to clipboard

Use non-root install by default

Open SS1823 opened this issue 2 years ago • 2 comments

Description: Non-root install in tool cache using Microsoft provided binary archives.

Justification: self-shosted runners should be run as non-privileged user for security. The action is unable to install dotnet without hacks, that are hard to maintain.

Are you willing to submit a PR? I can try.

SS1823 avatar Nov 27 '23 16:11 SS1823

Hello, @SS1823 ! Thank you for your suggestion, we will take into consideration and see what can be done :)

dusan-trickovic avatar Nov 28 '23 10:11 dusan-trickovic

btw, there's https://dotnetcli.blob.core.windows.net/dotnet/release-metadata/releases-index.json API and additionally each release has own release.json endpoint, along with all the .zip/tar.gz urls

SS1823 avatar Nov 28 '23 13:11 SS1823