From 2946734c763809e22797f5a47b2b2e0b84a13035 Mon Sep 17 00:00:00 2001 From: eric Date: Tue, 9 Dec 2025 22:01:23 -0800 Subject: [PATCH] Add SHA256 checksums to releases MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Generates checksums.txt with SHA256 hashes for all binaries, enabling verification when downloading (e.g., with Ansible get_url). 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 --- .github/workflows/release.yml | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 18b7185..df63079 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -61,6 +61,13 @@ jobs: id: sha run: echo "short=$(git rev-parse --short HEAD)" >> $GITHUB_OUTPUT + - name: Generate checksums + run: | + cd artifacts + sha256sum duckgres-linux-amd64/duckgres-linux-amd64 duckgres-linux-arm64/duckgres-linux-arm64 | \ + sed 's|duckgres-linux-\([^/]*\)/||g' > checksums.txt + cat checksums.txt + - name: Create Release uses: softprops/action-gh-release@v2 with: @@ -71,6 +78,7 @@ jobs: files: | artifacts/duckgres-linux-amd64/duckgres-linux-amd64 artifacts/duckgres-linux-arm64/duckgres-linux-arm64 + artifacts/checksums.txt - name: Delete existing latest release run: gh release delete latest --yes || true @@ -94,7 +102,9 @@ jobs: ``` https://github.com/PostHog/duckgres/releases/latest/download/duckgres-linux-amd64 https://github.com/PostHog/duckgres/releases/latest/download/duckgres-linux-arm64 + https://github.com/PostHog/duckgres/releases/latest/download/checksums.txt ``` files: | artifacts/duckgres-linux-amd64/duckgres-linux-amd64 artifacts/duckgres-linux-arm64/duckgres-linux-arm64 + artifacts/checksums.txt