asdf-kubectl icon indicating copy to clipboard operation
asdf-kubectl copied to clipboard

Check the sha256 of the binary download

Open arthurzenika opened this issue 1 year ago • 0 comments

In the kubectl install guide https://kubernetes.io/docs/tasks/tools/install-kubectl-linux/ there is a recommended step of "Validate the binary"

curl -LO "https://dl.k8s.io/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl.sha256"
echo "$(cat kubectl.sha256)  kubectl" | sha256sum --check

It would be nice to have such a security feature when installing kubectl with asdf, could this be done in the plugin ?

Not sure if this should be done in asdf or in the plugin, so I filed a issue also on asdf : https://github.com/asdf-vm/asdf/issues/1320

arthurzenika avatar Aug 25 '22 14:08 arthurzenika