function LockFileValidator::storeHash

Stores the XXH64 hash of the active lock file.

We store the hash of the lock file itself, rather than its content-hash value, which is actually a hash of certain parts of composer.json. Our aim is to verify that the actual installed packages have not changed unexpectedly; we don't care about the contents of composer.json.

Parameters

\Drupal\package_manager\Event\PreCreateEvent $event: The event being handled.

File

core/modules/package_manager/src/Validator/LockFileValidator.php, line 90

Class

LockFileValidator

Checks that the active lock file is unchanged during stage operations.

Namespace

Code

public function storeHash(PreCreateEvent $event) : void {
    $active_lock_file_path = $this->pathLocator
        ->getProjectRoot() . DIRECTORY_SEPARATOR . 'composer.lock';
    $hash = $this->getHash($active_lock_file_path);
    if ($hash) {
        $this->keyValue
            ->set(static::KEY, $hash);
    }
    else {
        $event->addError([
            $this->t('The active lock file (@file) does not exist.', [
                '@file' => $active_lock_file_path,
            ]),
        ]);
    }
}