From 60953fa49e07a38da5c55170633ec32962568aed Mon Sep 17 00:00:00 2001 From: Tom Wieczorek Date: Wed, 22 Jan 2025 08:40:59 +0100 Subject: [PATCH] Airgap image bundle verification in GH Action step Test the resulting tar archive and compute its SHA-256 digest to verify the integrity of the created airgap image bundle. Signed-off-by: Tom Wieczorek --- .github/workflows/build-airgap-image-bundle.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/build-airgap-image-bundle.yml b/.github/workflows/build-airgap-image-bundle.yml index 72469322450f..71464cdb7cfc 100644 --- a/.github/workflows/build-airgap-image-bundle.yml +++ b/.github/workflows/build-airgap-image-bundle.yml @@ -61,6 +61,8 @@ jobs: mkdir -p "embedded-bins/staging/$TARGET_OS/bin" make --touch airgap-images.txt make "airgap-image-bundle-$TARGET_OS-$TARGET_ARCH.tar" + tar tf "airgap-image-bundle-$TARGET_OS-$TARGET_ARCH.tar" >/dev/null + sha256sum "airgap-image-bundle-$TARGET_OS-$TARGET_ARCH.tar" - name: "Upload :: Airgap image bundle" uses: actions/upload-artifact@v4