#18081 Don't advise people to curl-to-bash, especially in CI. Issue created by asherf referring to: https://www.pantsbuild.org/v2.15/docs/installation

To install the pants binary use:

/bin/bash -c "$(curl -fsSL https://static.pantsbuild.org/setup/pantsup.sh)"

This will install pants into ~/bin, which must be on your PATH. The installer script will warn you if it is not.

Screenshot 2023-01-24 at 3 16 47 PM▾

this is generally a bad practice and will put a huge target on that endpoint. https://about.codecov.io/security-update/ I think people should just have this script checked into their repo and use it from there (which will also be slightly faster in CI, but that is not the point) we could provide guidance on how to run a CI job that will fail if the script is out of date (curling it and comparing sha256), people can choose have CI workflow that will notify slack (for example) or break their CI build if the script is out of date. pantsbuild/pants