Use `--no-verify` flag when creating JVM Dependency repos. (!23399) · Merge requests · Warren Gifford / sourcegraph

Warren Gifford requested to merge olafurpg/no-verify into main Jul 30, 2021

Created by: olafurpg

Previously, we could potentially run pre-commit and pre-push hooks when creating JVM dependency repos. This commit adds the --no-verify flag to the invoked git commit/push commands to guarantee that hooks don't run.

Related to https://github.com/sourcegraph/security-issues/issues/163

Use `--no-verify` flag when creating JVM Dependency repos.

Merge request reports