A better location for the sdk.

Author: jonkeane

dev/tasks/r/github.macos.cran.yml

@@ -62,10 +62,19 @@ jobs:
             any::sys
       - name: Install MacOSX 11.3 SDK
         if: matrix.config == 'cran-release'
+        env:
+          SDK_TOKEN: {{ '${{ secrets.JONKEANE_MACOS_11_SDK_DOWNLOAD_TOKEN }}' }}
         run: |
-          curl -fsSL https://github.com/phracker/MacOSX-SDKs/releases/download/11.3/MacOSX11.3.sdk.tar.xz -o /tmp/MacOSX11.3.sdk.tar.xz
-          sudo tar -xf /tmp/MacOSX11.3.sdk.tar.xz -C /Library/Developer/CommandLineTools/SDKs/
-          echo "Installed MacOSX11.3.sdk to /Library/Developer/CommandLineTools/SDKs/"
+          # Download, Confirm integrity, expand. This will fail if the hash does not match.
+          curl -fsSL -H "Authorization: Bearer $SDK_TOKEN" \
+            -H "Accept: application/vnd.github+json" \
+            https://api.github.com/repos/jonkeane/crossbow_11_sdk/tarball/v0.0.1 \
+            -o /tmp/MacOSX11.3.sdk.tar.gz
+          echo "493570e56d6c6af26128e9096de738822589cc3cdb1b29aa5854f3f4c99756ac  /tmp/MacOSX11.3.sdk.tar.gz" | shasum -a 256 -c -
+          sudo tar -xzf /tmp/MacOSX11.3.sdk.tar.gz -C /Library/Developer/CommandLineTools/SDKs/
+          # Rename the extracted folder (GitHub archives as {owner}-{repo}-{sha}/)
+          sudo mv /Library/Developer/CommandLineTools/SDKs/jonkeane-crossbow_11_sdk-* \
+            /Library/Developer/CommandLineTools/SDKs/MacOSX11.3.sdk
           ls -la /Library/Developer/CommandLineTools/SDKs/
       - name: Install (cran-release)
         if: matrix.config == 'cran-release'