From 79b44cee29c7a0ee10e7f972d68f0e7ee586b25c Mon Sep 17 00:00:00 2001 From: "Jose D. Gomez R" <1josegomezr@gmail.com> Date: Wed, 27 Sep 2023 21:34:08 +0200 Subject: [PATCH] Create and validate install.sh signatures (#8312) - SHA256 Signature of the install script - Added a sha256sum invocations in the validate script. These calls will validate that the install script signatures match. And when the script is changed the signatures must be recalculated as reported by the error message in sha256sum. Signed-off-by: Jose D. Gomez R --- install.sh.sha256sum | 1 + scripts/validate | 3 +++ 2 files changed, 4 insertions(+) create mode 100644 install.sh.sha256sum diff --git a/install.sh.sha256sum b/install.sh.sha256sum new file mode 100644 index 0000000000..03182facbc --- /dev/null +++ b/install.sh.sha256sum @@ -0,0 +1 @@ +4903337c0ec695a4a1f1a755737a86b985c85dc0e5174f16c971455186e4bf31 install.sh diff --git a/scripts/validate b/scripts/validate index ee9fc75a68..7413259890 100755 --- a/scripts/validate +++ b/scripts/validate @@ -8,6 +8,9 @@ fi cd $(dirname $0)/.. +echo Running: install script signature checks +sha256sum -c install.sh.sha256sum + echo Running: go mod tidy go mod tidy