-
Notifications
You must be signed in to change notification settings - Fork 561
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat: sha256 checksums for binary releases #293
Conversation
.releaserc
Outdated
@@ -3,7 +3,7 @@ | |||
"@semantic-release/npm", | |||
{ | |||
"path": "@semantic-release/exec", | |||
"cmd": "npm i -g pkg && pkg ." | |||
"cmd": "npm i -g pkg && pkg . && shasum -a 256 snyk-linux > snyk-linux.sha256 && shasum -a 256 snyk-macos > snyk-macos.sha256 && shasum -a 256 snyk-win.exe > snyk-win.exe.sha25" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Missing 6
at the end
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
right! I remember saying to myself "add a 6 after you paste" 😅 thanks ! 🙏
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
sha25 is probably secure too !
I'll also verify now that the |
With this, sha256 checksums will be computed for the binary packages of the CLI and will be uploaded together with the binaries as release assets to GitHub, and will be named as `snyk-<platform>.sha256`.
37a2f2c
to
0b13a04
Compare
cool - |
introduced in previous PR: #293
🎉 This PR is included in version 1.115.0 🎉 The release is available on: Your semantic-release bot 📦🚀 |
With this, sha256 checksums will be computed for the binary packages of the CLI and will be uploaded together with the binaries as release assets to GitHub, and will be named as
snyk-<platform>.sha256
.