[Bug]: Problems to verify the download (sha512) did not match

[b-hal]

Version

• [X] I'm using version 1.10.0

Known issues

• [X] I've checked Known issues

Existing issues

• [X] I've checked Existing issues

What operating system are you using?

macOS

Operating System Version

macOS Big Sur

Reproduction steps

1. download: https://github.com/hovancik/stretchly/releases/download/v1.10.0/Stretchly-1.10.0.dmg

2. download: latest-mac.yml

3. latest-mac.yml says: Stretchly-1.10.0.dmg sha512: BSePTAZqxRpilzDsBx6ryJ2/B3WZLniW8cTnOF5FI9zy0BfAmhu+DwjUpMPj4UAOK6hTAKs3fYR2A7wbtLF8cw== size: 112589616

4. my download gives: openssl dgst -sha512 /Users/name/Downloads/Stretchly-1.10.0.dmg SHA512(/Users/name/Downloads/Stretchly-1.10.0.dmg)= 05278f4c066ac51a629730ec071eabc89dbf0775992e7896f1c4e7385e4523dcf2d017c09a1bbe0f08d4a4c3e3e1400e2ba85300ab377d847603bc1bb4b17c73

5. Why does the sha512 do not match?

Expected Behavior

the sha512 should match

Actual Behavior

s the sha512 do not match

Relevant log output

No response

Preferences

No response

Additional information

No response

Code of Conduct

• [X] I agree to follow this project's Code of Conduct

[hovancik]

I don't know. I am not making builds, they are done by Github actions:

https://github.com/hovancik/stretchly/pull/1100/checks

https://pipelines.actions.githubusercontent.com/VeX7UUf7LlmANAl317jvtgi6n54O9Lnxie4FrKstd4GnaIxhp3/_apis/pipelines/1/runs/649/signedlogcontent/2?urlExpires=2022-03-05T13%3A59%3A22.9438986Z&urlSigningMethod=HMACV1&urlSignature=G3E3sH0MsovqU%2BiS4EEwXtdcKZpwPLBnms2ib%2B7hPT0%3D

I've checked some other ones and it's the same, so probably electron-builder issue. There is some old one, but was closed by bot: https://github.com/electron-userland/electron-builder/issues/5384

The value that gets populated into latest-mac looks weird: BSePTAZqxRpilzDsBx6ryJ2/B3WZLniW8cTnOF5FI9zy0BfAmhu+DwjUpMPj4UAOK6hTAKs3fYR2A7wbtLF8cw== with tthat ending, but then, I am not sure how correct value should look like

[hovancik]

I've tried also https://github.com/vercel/hyper/releases/tag/v3.2.0 and it also does not match. I am using sha512sum xxxx. Maybe that's not correct way to do it or it's issue with electron-builder then

[b-hal]

Thank you for your immediate response. Maybe it is to much effort for the distribution checksums, even as most people will or could not verify the checksums.

[hovancik]

I've opened issue: https://github.com/electron-userland/electron-builder/issues/6717