From 6dd27e7c62620090f8beb78f46d262cd0fcd04a3 Mon Sep 17 00:00:00 2001 From: Jan Kiszka Date: Sat, 9 Oct 2021 14:58:34 +0200 Subject: [PATCH] ci: Validate shellcheck archive This avoids pulling in anything unexpected and then running it as part of the test and later on image build process. Signed-off-by: Jan Kiszka --- .github/workflows/next.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/next.yml b/.github/workflows/next.yml index 36539c5..13839a3 100644 --- a/.github/workflows/next.yml +++ b/.github/workflows/next.yml @@ -7,6 +7,7 @@ on: env: SHELLCHECK_VERSION: v0.7.1 + SHELLCHECK_SHA256: 64f17152d96d7ec261ad3086ed42d18232fcb65148b44571b564d688269d36c8 jobs: perform_tests: @@ -34,6 +35,7 @@ jobs: - name: Install recent shellcheck run: | wget -q https://github.com/koalaman/shellcheck/releases/download/$SHELLCHECK_VERSION/shellcheck-$SHELLCHECK_VERSION.linux.x86_64.tar.xz + echo "$SHELLCHECK_SHA256 shellcheck-$SHELLCHECK_VERSION.linux.x86_64.tar.xz" | sha256sum -c tar -xJf shellcheck-$SHELLCHECK_VERSION.linux.x86_64.tar.xz sudo cp shellcheck-$SHELLCHECK_VERSION/shellcheck /usr/local/bin/ - name: Run tests