Add checksum verification for downloaded installation script

DataDog / test-visibility-github-action

GitHub Action that installs Datadog Test Visibility

Apache License 2.0

3 stars 1 forks source link

Add checksum verification for downloaded installation script #8

Closed nikita-tkachenko-datadog closed 3 months ago

nikita-tkachenko-datadog commented 3 months ago

What does this PR do?

Updates the action to download installation script checksum along with the script. The checksum is used to verify the script's integrity.

Motivation

Additional Notes

Possible Drawbacks / Trade-offs

Describe how to test/QA your changes

CI tests.

anmarchenko commented 3 months ago

@nikita-tkachenko-datadog it might be worth asking someone from security team to review this as I have zero experience with safe executables distribution