[windows] pin checksum where avaiable (#9005)

Related: https://github.com/actions/runner-images-internal/issues/5489
This commit is contained in:
ilia-shipitsin
2023-12-14 20:57:47 +01:00
committed by GitHub
parent 3945d6e7dc
commit 1921245719
7 changed files with 18 additions and 12 deletions

View File

@@ -2,6 +2,7 @@
## File: Install-ServiceFabricSDK.ps1
## Desc: Install webpicmd and then the service fabric sdk
## must be install after Visual Studio
## Supply chain security: checksum validation
################################################################################
# Creating 'Installer' cache folder if it doesn't exist
@@ -10,17 +11,19 @@ New-Item -Path 'C:\Windows\Installer' -ItemType Directory -Force
# Get Service Fabric components versions
$runtimeVersion = (Get-ToolsetContent).serviceFabric.runtime.version
$sdkVersion = (Get-ToolsetContent).serviceFabric.sdk.version
$urlBase = "https://download.microsoft.com/download/b/8/a/b8a2fb98-0ec1-41e5-be98-9d8b5abf7856"
# Install Service Fabric Runtime for Windows
Install-Binary `
-Url "${urlBase}/MicrosoftServiceFabric.${runtimeVersion}.exe" `
-InstallArgs @("/accepteula ", "/quiet", "/force") `
-ExpectedSignature (Get-ToolsetContent).serviceFabric.runtime.signature
-ExpectedSHA256Sum (Get-ToolsetContent).serviceFabric.runtime.checksum
# Install Service Fabric SDK
Install-Binary `
-Url "${urlBase}/MicrosoftServiceFabricSDK.${sdkVersion}.msi" `
-ExpectedSignature (Get-ToolsetContent).serviceFabric.sdk.signature
-ExpectedSHA256Sum (Get-ToolsetContent).serviceFabric.sdk.checksum
Invoke-PesterTests -TestFile "Tools" -TestName "ServiceFabricSDK"