small-tech / should-i-pipe-it

Is this installation script safe to pipe into my shell?
GNU Affero General Public License v3.0
18 stars 1 forks source link

How do you calculate the hashes? #4

Closed rugk closed 4 years ago

rugk commented 4 years ago

I always get different ones.

https://raw.githubusercontent.com/nvm-sh/nvm/v0.35.3/install.sh e.g. is

$ sha512sum install.sh 
dca3e27af2255e6d63a8558eee751bceef88375e7677ed3c0cbf745c8e91604067245502601db41fd00f7e701af8e94b135cdb7c99079c1ee27341cdb6c70368  install.sh

You say, it should be: 984a81da052906553f28510b75fa5cd49d148429dd2caf36bae790a5dc646eb8aef43cc79e95ebdabfe486ba1f252044741cf2ffc86bafa6d0a8263d74199633

rugk commented 4 years ago

It's BLAKE2b-512! uff… Closing in favor of https://github.com/small-tech/should-i-pipe-it/issues/5