From d0cbe29bfcaef2b320cc730f0621991b05a9c42e Mon Sep 17 00:00:00 2001 From: Aptivi Date: Thu, 10 Oct 2024 11:13:10 +0300 Subject: [PATCH] imp - Roll out hash sum in changelogs --- As we promised yesterday, we've started rolling out hash sums in the releases section. --- Type: imp Breaking: False Doc Required: False Backport Required: False Part: 1/1 --- .github/workflows/release.yml | 5 ++++- CHANGES | 5 +++++ 2 files changed, 9 insertions(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 94190a0..3328851 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -10,7 +10,9 @@ jobs: runs-on: ubuntu-latest permissions: + id-token: write contents: write + attestations: write steps: - uses: actions/checkout@v4 with: @@ -32,6 +34,7 @@ jobs: echo "SUBJECT=$(cat CHANGES.TITLE)" >> "$GITHUB_OUTPUT" echo 'BODY<> "$GITHUB_OUTPUT" cat CHANGES >> "$GITHUB_OUTPUT" + sha256sum tools/*.zip | sed -e 's/^/- /g' >> "$GITHUB_OUTPUT" echo 'EOF' >> "$GITHUB_OUTPUT" - name: Binary Attestation uses: actions/attest-build-provenance@v1 @@ -40,7 +43,7 @@ jobs: - name: Release Making uses: softprops/action-gh-release@v2 with: - body_path: CHANGES + body: ${{ steps.release-asset.outputs.BODY }} name: ${{ steps.release-asset.outputs.SUBJECT }} files: | tools/*.zip diff --git a/CHANGES b/CHANGES index 7adebc6..9b79410 100644 --- a/CHANGES +++ b/CHANGES @@ -17,3 +17,8 @@ Review the commit history if you want to get a deep insight about the changes. ### Feedback? If you have issues with this version, report to us by [making a new issue ticket](https://github.com/Aptivi/VisualCard/issues/new). + +### Sum hashes + +To verify integrity of your download, compare the SHA256 sum of your downloaded file with the following information: +