Skip to content

Add SHA256 checksum verification for func CLI downloads#113

Merged
creydr merged 1 commit intofunctions-dev:mainfrom
creydr:fix/func-cli-checksum-verification
Apr 29, 2026
Merged

Add SHA256 checksum verification for func CLI downloads#113
creydr merged 1 commit intofunctions-dev:mainfrom
creydr:fix/func-cli-checksum-verification

Conversation

@creydr
Copy link
Copy Markdown
Collaborator

@creydr creydr commented Apr 29, 2026

Summary

  • Verify the integrity of the downloaded func CLI binary against the checksums.txt file published with each GitHub release
  • If the checksum doesn't match or checksums.txt is missing from the release, the download is rejected and the temporary file is cleaned up
  • Prevents installing a corrupted or tampered binary (e.g. from network MITM or compromised release)

Verify the integrity of the downloaded func CLI binary against the
checksums.txt file published with each GitHub release. This prevents
installing a corrupted or tampered binary.
@creydr creydr enabled auto-merge April 29, 2026 08:10
@creydr creydr added this pull request to the merge queue Apr 29, 2026
Merged via the queue into functions-dev:main with commit 7b35051 Apr 29, 2026
11 checks passed
@creydr creydr deleted the fix/func-cli-checksum-verification branch April 29, 2026 11:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant