Merge pull request #37 from step-security/sha256

Use SHA 256 to verify tools
step-security · Dec 14, 2021 · 99f91e6 · 99f91e6
2 parents 4f04fa9 + 5e6c0d8
commit 99f91e6
Show file tree

Hide file tree

Showing 4 changed files with 4 additions and 4 deletions.
diff --git a/dist/pre/index.js b/dist/pre/index.js
diff --git a/dist/pre/index.js.map b/dist/pre/index.js.map
diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
     "name": "step-security-harden-runner",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "description": "GitHub Actions Runtime Security",
     "main": "index.js",
     "scripts": {

diff --git a/src/setup.ts b/src/setup.ts
@@ -49,7 +49,7 @@ import * as tc from "@actions/tool-cache";
     cp.execSync("sudo chown -R $USER /home/agent");
 
     const downloadPath: string = await tc.downloadTool(
-      "https://github.com/step-security/agent/releases/download/v0.4.0/agent_0.4.0_linux_amd64.tar.gz"
+      "https://github.com/step-security/agent/releases/download/v0.4.1/agent_0.4.1_linux_amd64.tar.gz"
     );
     const extractPath = await tc.extractTar(downloadPath);