dotnet / install-scripts

MIT License
127 stars 70 forks source link

Log checksum of targeted CLI Blob storage URIs #383

Closed donJoseLuis closed 3 months ago

donJoseLuis commented 11 months ago

Introduce checksum for targeted URIs in logs (PS1 & sh)

YuliiaKovalova commented 11 months ago

the checksum for the remote package can be extracted from https://dotnetcli.blob.core.windows.net/dotnet/checksums/7.0.11-sha.txt 7.0.11 represents runtime version in the link

repo with all checksums https://github.com/dotnet/core/blob/main/release-notes/7.0/7.0.9/7.0.9.md

baronfel commented 8 months ago

We can't rely on the checksums from that location in the general case - users providing custom feed urls may be serving SDKs/Runtimes that have different content.

YuliiaKovalova commented 3 months ago

It will be addressed in scope of :https://github.com/dotnet/install-scripts/issues/463