feat: check sha256sum (#166)

coverallsapp · Apr 14, 2023 · ca2a9dd · ca2a9dd
1 parent 045a251
commit ca2a9dd
Showing 1 changed file with 12 additions and 2 deletions.
diff --git a/action.yml b/action.yml
@@ -76,15 +76,25 @@ runs:
       shell: bash
       run: |
         mkdir -p ~/bin/
-        curl -sL https://github.com/coverallsapp/coverage-reporter/releases/latest/download/coveralls-linux.tar.gz | tar xz -C ~/bin
+        cd ~/bin/
+        curl -sLO https://github.com/coverallsapp/coverage-reporter/releases/latest/download/coveralls-linux.tar.gz
+        curl -sLO https://github.com/coverallsapp/coverage-reporter/releases/latest/download/coveralls-checksums.txt
+        cat coveralls-checksums.txt | grep coveralls-linux.tar.gz | sha256sum --check
+        tar -xzf coveralls-linux.tar.gz
+        rm coveralls-checksums.txt
         echo ~/bin >> $GITHUB_PATH
 
     - name: Install coveralls reporter (Windows)
       if: startsWith(runner.os, 'Windows')
       shell: bash
       run: |
         mkdir -p ~/bin/
-        curl -sL https://github.com/coverallsapp/coverage-reporter/releases/latest/download/coveralls-windows.zip | zcat > ~/bin/coveralls.exe
+        cd ~/bin/
+        curl -sLO https://github.com/coverallsapp/coverage-reporter/releases/latest/download/coveralls-windows.zip
+        curl -sLO https://github.com/coverallsapp/coverage-reporter/releases/latest/download/coveralls-checksums.txt
+        cat coveralls-checksums.txt | grep coveralls-windows.zip | sha256sum --check
+        zcat coveralls-windows.zip > coveralls.exe
+        rm coveralls-checksums.txt
         echo ~/bin >> $GITHUB_PATH
 
     - name: Done report