summary refs log tree commit diff
diff options
context:
space:
mode:
-rw-r--r--.github/workflows/pending-clear.yml5
-rw-r--r--.github/workflows/pending-set.yml5
2 files changed, 10 insertions, 0 deletions
diff --git a/.github/workflows/pending-clear.yml b/.github/workflows/pending-clear.yml
index d888a414506..e9eb9395bc4 100644
--- a/.github/workflows/pending-clear.yml
+++ b/.github/workflows/pending-clear.yml
@@ -13,10 +13,15 @@ jobs:
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         GSU_VERSION: "0.5.0"
+        GSU_HASH: "49df54dc0ed5eaa037400b66be8114bd62fa0af51ed36565f6203dc312711cc6"
         GSU_URL: "https://github.com/cloudposse/github-status-updater/releases/download"
       run: |
         curl -sSf -O -L -C - \
         "$GSU_URL/$GSU_VERSION/github-status-updater_linux_amd64" && \
+        if [ "$(shasum -a 256 github-status-updater_linux_amd64 | cut -c1-64)" != "$GSU_HASH" ]; then
+          echo "checksum mismatch"
+          exit 1
+        fi
         chmod +x github-status-updater_linux_amd64 && \
         ./github-status-updater_linux_amd64 \
           -action update_state \
diff --git a/.github/workflows/pending-set.yml b/.github/workflows/pending-set.yml
index ee1d537295c..36104706b6f 100644
--- a/.github/workflows/pending-set.yml
+++ b/.github/workflows/pending-set.yml
@@ -12,10 +12,15 @@ jobs:
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         GSU_VERSION: "0.5.0"
+        GSU_HASH: "49df54dc0ed5eaa037400b66be8114bd62fa0af51ed36565f6203dc312711cc6"
         GSU_URL: "https://github.com/cloudposse/github-status-updater/releases/download"
       run: |
         curl -sSf -O -L -C - \
         "$GSU_URL/$GSU_VERSION/github-status-updater_linux_amd64" && \
+        if [ "$(shasum -a 256 github-status-updater_linux_amd64 | cut -c1-64)" != "$GSU_HASH" ]; then
+          echo "checksum mismatch"
+          exit 1
+        fi
         chmod +x github-status-updater_linux_amd64 && \
         ./github-status-updater_linux_amd64 \
           -action update_state \