Skip to content

fix: verify release checksums during install - #17

Merged
mfzzf merged 1 commit into
mainfrom
fix/verify-release-checksums
Aug 12, 2026
Merged

fix: verify release checksums during install#17
mfzzf merged 1 commit into
mainfrom
fix/verify-release-checksums

Conversation

@mfzzf

@mfzzf mfzzf commented Aug 12, 2026

Copy link
Copy Markdown
Contributor

Summary

  • publish a SHA256 sidecar for every release archive
  • make the POSIX installer fail closed unless the official sidecar matches
  • make the Windows installer perform the same SHA256 verification

Validation

  • go test ./...
  • sh -n install.sh
  • git diff --check

@mfzzf
mfzzf merged commit fe845ee into main Aug 12, 2026
1 check passed
@mfzzf
mfzzf deleted the fix/verify-release-checksums branch August 12, 2026 04:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant