[windows] pin checksum where avaiable (#9005)

Related: https://github.com/actions/runner-images-internal/issues/5489
This commit is contained in:
ilia-shipitsin
2023-12-14 20:57:47 +01:00
committed by GitHub
parent 3945d6e7dc
commit 1921245719
7 changed files with 18 additions and 12 deletions

View File

@@ -1,20 +1,20 @@
################################################################################
## File: Install-VCRedist.ps1
## Desc: Install Visual C++ Redistributable
## Supply chain security: checksum validation
################################################################################
$baseUrl = "https://download.microsoft.com/download/1/6/5/165255E7-1014-4D0A-B094-B6A430A6BFFC"
$argumentList = ("/install", "/quiet", "/norestart")
$signatureThumbrint = "ABDCA79AF9DD48A0EA702AD45260B3C03093FB4B"
Install-Binary `
-Url "${baseUrl}/vcredist_x86.exe" `
-InstallArgs $argumentList `
-ExpectedSignature $signatureThumbrint
-ExpectedSHA256Sum '99DCE3C841CC6028560830F7866C9CE2928C98CF3256892EF8E6CF755147B0D8'
Install-Binary `
-Url "${baseUrl}/vcredist_x64.exe" `
-InstallArgs $argumentList `
-ExpectedSignature $signatureThumbrint
-ExpectedSHA256Sum 'F3B7A76D84D23F91957AA18456A14B4E90609E4CE8194C5653384ED38DADA6F3'
Invoke-PesterTests -TestFile "Tools" -TestName "VCRedist"