actions/runner-images-sangeeth
1
0
Fork 0
mirror of https://github.com/actions/runner-images-sangeeth.git synced 2026-01-02 15:27:16 +08:00
Code Issues Packages Projects Releases Wiki Activity

[windows] implement checksum validation for Miniconda (#8506)

Browse Source
This commit is contained in:
ilia-shipitsin
2023-10-11 11:01:06 +02:00
committed by GitHub
parent 929931f617
commit 47a634e28b
1 changed files with 17 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
images/win/scripts/Installers/Install-Miniconda.ps1
View File

@@ -1,6 +1,7 @@
################################################################################
## File: Install-Miniconda.ps1
## Desc: Install the latest version of Miniconda and set $env:CONDA
## Supply chain security: checksum validation
################################################################################
$CondaDestination = "C:\Miniconda"
@@ -13,4 +14,19 @@ $ArgumentList = ("/S", "/AddToPath=0", "/RegisterPython=0", "/D=$CondaDestinatio
Install-Binary -Url $InstallerUrl -Name $InstallerName -ArgumentList $ArgumentList
Set-SystemVariable -SystemVariable "CONDA" -Value $CondaDestination
Invoke-PesterTests -TestFile "Miniconda"
#region Supply chain security
$localFileHash = (Get-FileHash -Path (Join-Path ${env:TEMP} $installerName) -Algorithm SHA256).Hash
$distributorFileHash = $null
$checksums = (Invoke-RestMethod -Uri 'https://repo.anaconda.com/miniconda/' | ConvertFrom-HTML).SelectNodes('//html/body/table/tr')
ForEach($node in $checksums) {
if ($node.ChildNodes[1].InnerText -eq $InstallerName) {
$distributorFileHash = $node.ChildNodes[7].InnerText
}
}
Use-ChecksumComparison -LocalFileHash $localFileHash -DistributorFileHash $distributorFileHash
#endregion
Invoke-PesterTests -TestFile "Miniconda"