Skip to content

feat(security): add SHA-256 checksums to release artifacts (B5) #57

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
beonde merged 1 commit into from
Mar 27, 2026
Merged

feat(security): add SHA-256 checksums to release artifacts (B5) #57

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 4 additions & 0 deletions .github/workflows/release.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -34,6 +34,9 @@ jobs:
- name: Build Windows
run: GOOS=windows GOARCH=amd64 go build -o capiscio-windows-amd64.exe ./cmd/capiscio

- name: Generate checksums
run: sha256sum capiscio-linux-amd64 capiscio-darwin-amd64 capiscio-darwin-arm64 capiscio-windows-amd64.exe > checksums.txt
Comment on lines +37 to +38
Copy link

Copilot AI Mar 27, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The workflow is still pinning Go to 1.24.0 (both build-cli and test jobs), while go.mod requires Go 1.25.0 and CI lint/test already run on 1.25.0. This makes releases/toolchain selection inconsistent and can break builds depending on toolchain auto-download behavior. Consider updating actions/setup-go to v5 and setting go-version to 1.25.0 here as well.

Copilot uses AI. Check for mistakes.

- name: Create Release
uses: softprops/action-gh-release@v1
with:
Expand All @@ -43,6 +46,7 @@ jobs:
capiscio-darwin-amd64
capiscio-darwin-arm64
capiscio-windows-amd64.exe
checksums.txt
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

Expand Down
Loading