Add hash check for Kotlin, Minikube, AWS SAM CLI (#8596)

This commit is contained in:
Erik Bershel
2023-10-23 14:36:13 +02:00
committed by GitHub
parent 567d74923a
commit d818bf1a01
3 changed files with 27 additions and 9 deletions

View File

@@ -2,16 +2,22 @@
################################################################################
## File: kotlin.sh
## Desc: Installs Kotlin
## Supply chain security: Kotlin - checksum validation
################################################################################
source $HELPER_SCRIPTS/install.sh
KOTLIN_ROOT="/usr/share"
downloadUrl=$(get_github_package_download_url "JetBrains/kotlin" "contains(\"kotlin-compiler\")")
download_with_retries "$downloadUrl" "/tmp"
kotlin_zip_name="kotlin-compiler.zip"
download_url=$(get_github_package_download_url "JetBrains/kotlin" "contains(\"kotlin-compiler\")")
download_with_retries "$download_url" "/tmp" "$kotlin_zip_name"
unzip -qq /tmp/kotlin-compiler*.zip -d $KOTLIN_ROOT
# Supply chain security - Kotlin
kotlin_hash=$(get_github_package_hash "JetBrains" "kotlin" "kotlin-compiler" "" "latest" "false" "|" 3)
use_checksum_comparison "/tmp/${kotlin_zip_name}" "$kotlin_hash"
unzip -qq /tmp/${kotlin_zip_name} -d $KOTLIN_ROOT
rm $KOTLIN_ROOT/kotlinc/bin/*.bat
ln -sf $KOTLIN_ROOT/kotlinc/bin/* /usr/bin
invoke_tests "Tools" "Kotlin"
invoke_tests "Tools" "Kotlin"