mirror of
https://github.com/actions/runner-images.git
synced 2025-12-20 06:35:47 +00:00
23 lines
889 B
Bash
23 lines
889 B
Bash
#!/bin/bash -e
|
|
################################################################################
|
|
## File: install-yq.sh
|
|
## Desc: Install yq - a command-line YAML, JSON and XML processor
|
|
## Supply chain security: yq - checksum validation
|
|
################################################################################
|
|
|
|
# Source the helpers for use with the script
|
|
source $HELPER_SCRIPTS/install.sh
|
|
|
|
# Download yq
|
|
yq_url=$(resolve_github_release_asset_url "mikefarah/yq" "endswith(\"yq_linux_amd64\")" "latest")
|
|
binary_path=$(download_with_retry "${yq_url}")
|
|
|
|
# Supply chain security - yq
|
|
hash_url=$(resolve_github_release_asset_url "mikefarah/yq" "endswith(\"checksums\")" "latest")
|
|
external_hash=$(get_checksum_from_url "${hash_url}" "yq_linux_amd64 " "SHA256" "true" " " "19")
|
|
use_checksum_comparison "$binary_path" "$external_hash"
|
|
|
|
# Install yq
|
|
install "$binary_path" /usr/bin/yq
|
|
|