actions/runner-images-sangeeth
1
0
Fork 0
mirror of https://github.com/actions/runner-images-sangeeth.git synced 2026-01-01 06:37:32 +08:00
Code Issues Packages Projects Releases Wiki Activity

[windows] implement checksum validation for rustup (#8314)

Browse Source
This commit is contained in:
ilia-shipitsin
2023-09-25 11:51:41 +02:00
committed by GitHub
parent 37b6325815
commit ac365421b0
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
images/win/scripts/Installers/Install-Rust.ps1
View File

@@ -1,6 +1,7 @@
################################################################################
## File: Install-Rust.ps1
## Desc: Install Rust for Windows
## Supply chain security: checksum validation for bootstrap, managed by rustup for workloads
################################################################################
# Rust Env
@@ -11,6 +12,13 @@ $env:CARGO_HOME = "C:\Users\Default\.cargo"
# See https://rustup.rs/#
$rustupPath = Start-DownloadWithRetry -Url "https://static.rust-lang.org/rustup/dist/x86_64-pc-windows-msvc/rustup-init.exe" -Name "rustup-init.exe"
#region Supply chain security
$localFileHash = (Get-FileHash -Path (Join-Path ${env:TEMP} 'rustup-init.exe') -Algorithm SHA256).Hash
$distributorFileHash = (Invoke-RestMethod -Uri 'https://static.rust-lang.org/rustup/dist/x86_64-pc-windows-msvc/rustup-init.exe.sha256').Trim()
Use-ChecksumComparison -LocalFileHash $localFileHash -DistributorFileHash $distributorFileHash
#endregion
# Install Rust by running rustup-init.exe (disabling the confirmation prompt with -y)
& $rustupPath -y --default-toolchain=stable --profile=minimal