add sha256 checksum verification on remote files

Signed-off-by: onur-ozkan <[email protected]>
KomodoPlatform · Sep 11, 2024 · f549d17 · f549d17
1 parent 00bab9e
commit f549d17
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 1 deletion.
diff --git a/.github/actions/deps-install/action.yml b/.github/actions/deps-install/action.yml
@@ -19,7 +19,8 @@ runs:
       shell: bash
       run: |
         wget https://github.com/protocolbuffers/protobuf/releases/download/v25.3/protoc-25.3-linux-x86_64.zip
-        unzip protoc-25.3-linux-x86_64 -d "$TMP/protobuf"
+        echo "f853e691868d0557425ea290bf7ba6384eef2fa9b04c323afab49a770ba9da80 protoc-25.3-linux-x86_64.zip" | sha256sum -c
+        unzip protoc-25.3-linux-x86_64.zip -d "$TMP/protobuf"
         echo "$TMP/protobuf/bin" >> $GITHUB_PATH
 
     - name: Install protoc (MacOS)
@@ -29,6 +30,7 @@ runs:
       shell: bash
       run: |
         wget https://github.com/protocolbuffers/protobuf/releases/download/v25.3/protoc-25.3-osx-x86_64.zip
+        echo "247e003b8e115405172eacc50bd19825209d85940728e766f0848eee7c80e2a1 ./protoc-25.3-osx-x86_64.zip" | shasum -a 256 -c
         unzip protoc-25.3-osx-x86_64.zip -d "$TMP/protobuf"
         echo "$TMP/protobuf/bin" >> $GITHUB_PATH
 

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -246,6 +246,7 @@ jobs:
           sudo apt-get update -y
           sudo apt-get install -y firefox
           wget https://github.com/mozilla/geckodriver/releases/download/v0.32.2/geckodriver-v0.32.2-linux64.tar.gz
+          echo "1eab226bf009599f5aa1d77d9ed4c374e10a03fd848b500be1b32cefd2cbec64 geckodriver-v0.32.2-linux64.tar.gz" | sha256sum -c
           sudo tar -xzvf geckodriver-v0.32.2-linux64.tar.gz -C /bin
           sudo chmod +x /bin/geckodriver