Request to Add Checksums to Releases

• [ ] https://github.com/koalaman/shellcheck/releases/ currently doesn't provide checksums with releases

I second this request.

I believe a file of release archive SHA-256 checksums (e.g., as generated by sha256sum) included in each new GitHub release would be helpful for automation.

For example, when pinning and installing a specific version of ShellCheck via a script in a CI pipeline, the DevOps engineer must currently pre-download the archive, calculate the checksum, and store it in the script or an env var. Ideally, the engineer could provide only the desired version to the script, which could then compare the downloaded archive against the published release checksum as a basic form of integrity checking.

Note that I am not asking the project to retrofit previous releases with checksums, only add them to future releases.

Thanks for your time and this incredible tool!

Same here, we compare checksums to make sure we're not getting altered source code packages when rebuilding images. Getting these with the release would help very much.