mirror of
https://github.com/actions/runner-images-sangeeth.git
synced 2025-12-20 06:29:50 +00:00
[Windows] Add checksum verification for AWS SAM CLI (#8316)
This commit is contained in:
@@ -1,6 +1,7 @@
|
|||||||
################################################################################
|
################################################################################
|
||||||
## File: Install-AWS.ps1
|
## File: Install-AWS.ps1
|
||||||
## Desc: Install AWS tools(AWS CLI, Session Manager Plugin for the AWS CLI, AWS SAM CLI)
|
## Desc: Install AWS tools(AWS CLI, Session Manager Plugin for the AWS CLI, AWS SAM CLI)
|
||||||
|
## Supply chain security: AWS CLI - managed by package manager, Session Manager Plugin for the AWS CLI - missing, AWS SAM CLI - checksum validation
|
||||||
################################################################################
|
################################################################################
|
||||||
|
|
||||||
# Install AWS CLI
|
# Install AWS CLI
|
||||||
@@ -13,6 +14,16 @@ Install-Binary -Url $sessionManagerUrl -Name $sessionManagerName -ArgumentList (
|
|||||||
$env:Path = $env:Path + ";$env:ProgramFiles\Amazon\SessionManagerPlugin\bin"
|
$env:Path = $env:Path + ";$env:ProgramFiles\Amazon\SessionManagerPlugin\bin"
|
||||||
|
|
||||||
# Install AWS SAM CLI
|
# Install AWS SAM CLI
|
||||||
Install-Binary -Url "https://github.com/awslabs/aws-sam-cli/releases/latest/download/AWS_SAM_CLI_64_PY3.msi" -Name "AWS_SAM_CLI_64_PY3.msi"
|
$packageName = "AWS_SAM_CLI_64_PY3.msi"
|
||||||
|
$packageUrl = "https://github.com/awslabs/aws-sam-cli/releases/latest/download/$packageName"
|
||||||
|
$packagePath = Start-DownloadWithRetry -Url $packageUrl -Name $packageName
|
||||||
|
|
||||||
Invoke-PesterTests -TestFile "CLI.Tools" -TestName "AWS"
|
#region Supply chain security - AWS SAM CLI
|
||||||
|
$fileHash = (Get-FileHash -Path $packagePath -Algorithm SHA256).Hash
|
||||||
|
$externalHash = Get-HashFromGitHubReleaseBody -RepoOwner "awslabs" -RepoName "aws-sam-cli" -FileName $packageName
|
||||||
|
Use-ChecksumComparison $fileHash $externalHash
|
||||||
|
#endregion
|
||||||
|
|
||||||
|
Install-Binary -FilePath $packagePath
|
||||||
|
|
||||||
|
Invoke-PesterTests -TestFile "CLI.Tools" -TestName "AWS"
|
||||||
|
|||||||
Reference in New Issue
Block a user