prefetch-yarn-deps: add cacert to provide certificates during fetches

Ideally fetch-yarn-deps could do like some other fetchers and support
using SSL_CERT_FILE if it exists and also only verify integrity on FOD
hash unless using an empty/test hash.

But this should keep at least the same semantics as before the recent
Node.js change to stop using the built-in certificate store in favor of
the system one (which does not exist by default in the build sandbox).

(cherry picked from commit ab99231a36)
This commit is contained in:
Lily Foster
2023-11-21 16:24:57 -05:00
committed by github-actions[bot]
parent ac97c8793d
commit 91fa380ed8

View File

@@ -62,7 +62,7 @@ in {
dontUnpack = src == null;
dontInstall = true;
nativeBuildInputs = [ prefetch-yarn-deps ];
nativeBuildInputs = [ prefetch-yarn-deps cacert ];
GIT_SSL_CAINFO = "${cacert}/etc/ssl/certs/ca-bundle.crt";
buildPhase = ''