mirror of
https://github.com/actions/runner-images.git
synced 2025-12-26 19:38:57 +08:00
25 lines
911 B
Bash
25 lines
911 B
Bash
#!/bin/bash -e
|
|
################################################################################
|
|
## File: install-oras-cli.sh
|
|
## Desc: Install ORAS CLI
|
|
## Supply chain security: ORAS CLI - checksum validation
|
|
################################################################################
|
|
|
|
source $HELPER_SCRIPTS/install.sh
|
|
|
|
# Determine latest ORAS CLI version
|
|
download_url=$(get_github_package_download_url "oras-project/oras" "endswith(\"linux_amd64.tar.gz\")")
|
|
|
|
# Download ORAS CLI
|
|
archive_path=$(download_with_retry "$download_url")
|
|
|
|
# Supply chain security - ORAS CLI
|
|
hash_url=$(get_github_package_download_url "oras-project/oras" "contains(\"checksums.txt\")")
|
|
external_hash=$(get_hash_from_remote_file "${hash_url}" "linux_amd64.tar.gz")
|
|
use_checksum_comparison "$archive_path" "${external_hash}"
|
|
|
|
# Unzip ORAS CLI
|
|
tar xzf "$archive_path" -C /usr/local/bin oras
|
|
|
|
invoke_tests "CLI.Tools" "Oras CLI"
|