jetify-com / devbox-install-action

31 stars 15 forks source link

Add SHA256 checksum to install action. #7

Closed mdwn closed 1 year ago

mdwn commented 1 year ago

The install action now supports a sha256 checksum of the resulting binary. In the event that jetpack's devbox install script is compromised, this will allow users to double check that the resulting binary has a checksum configured at the github action level, potentially preventing a breach of CI infrastructure.