Checksums should be verified for downloaded artifacts

Open Edholm opened this issue 3 years ago • 1 comments

Many GitHub releases also publish a checksum file. Sage could, if that file is available, also download it and verify the downloaded artifact against the checksum.

This is useful when downloading over a shaky connection (e.g. train).

An example of a release that also publish a checksum file: https://github.com/golangci/golangci-lint/releases/tag/v1.44.2

Mar 14 '22 08:03 Edholm

This issue has been open for 365 days with no activity. Marking as stale.

Apr 08 '24 08:04 github-actions[bot]