maxgoedjen / secretive

Store SSH keys in the Secure Enclave
MIT License
6.99k stars 155 forks source link

Add sha-256 checksums to auditable build output #377

Closed paulhammond closed 2 years ago

paulhammond commented 2 years ago

This pull request adds a sha-256 checksum to the "Document SHAs" step of the build process to make it easier to verify that the checksum embedded in the homebrew formula is the same as the checksum of the file built by GitHub Actions.

I've not actually been able to run this code in GitHub Actions (there are too many secrets to set up, as noted in #343) but the changes are simple enough that they should just work.