actions/runner-images
1
0
Fork 0
mirror of https://github.com/actions/runner-images.git synced 2026-01-08 11:30:49 +08:00
Code Issues Packages Projects Releases Wiki Activity

[Windows] Add checksum validation for Stack (#8403)

Browse Source
This commit is contained in:
Erik Bershel
2023-10-04 14:58:45 +02:00
committed by GitHub
parent 8b23f693e9
commit ae487529f3
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
images/win/scripts/Installers/Install-Stack.ps1
View File

@@ -1,6 +1,7 @@
################################################################################ ################################################################################
## File: Install-Stack.ps1 ## File: Install-Stack.ps1
## Desc: Install Stack for Windows ## Desc: Install Stack for Windows
## Supply chain security: Stack - checksum validation
################################################################################ ################################################################################
Write-Host "Get the latest Stack version..." Write-Host "Get the latest Stack version..."
@@ -14,6 +15,13 @@ $StackToolcachePath = Join-Path $Env:AGENT_TOOLSDIRECTORY "stack\$Version"
$DestinationPath = Join-Path $StackToolcachePath "x64" $DestinationPath = Join-Path $StackToolcachePath "x64"
$StackArchivePath = Start-DownloadWithRetry -Url $DownloadUrl $StackArchivePath = Start-DownloadWithRetry -Url $DownloadUrl
#region Supply chain security - Stack
$fileHash = (Get-FileHash -Path $StackArchivePath -Algorithm SHA256).Hash
$hashUrl = $StackReleasesJson.assets | Where-Object { $_.name.EndsWith("$DownloadFilePattern.sha256") } | Select-Object -ExpandProperty "browser_download_url" -First 1
$externalHash = (Invoke-RestMethod -Uri $hashURL).ToString().Split("`n").Where({ $_ -ilike "*$DownloadFilePattern*" }).Split(' ')[0]
Use-ChecksumComparison $fileHash $externalHash
#endregion
Write-Host "Expand stack archive" Write-Host "Expand stack archive"
Extract-7Zip -Path $StackArchivePath -DestinationPath $DestinationPath Extract-7Zip -Path $StackArchivePath -DestinationPath $DestinationPath