From e1521c2182e458bfa54195f043fddd094e6d3d3b Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20BIDON?= Date: Thu, 24 Sep 2026 22:29:14 +0200 Subject: [PATCH] ci: verify checksum of the downloaded doc theme MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Frédéric BIDON --- .github/workflows/update-doc.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/update-doc.yml b/.github/workflows/update-doc.yml index 8e71454b2..8844b5805 100644 --- a/.github/workflows/update-doc.yml +++ b/.github/workflows/update-doc.yml @@ -56,11 +56,14 @@ jobs: name: Initialize theme env: RELEARN_VERSION: 9.0.3 + RELEARN_SUM: "4e7f8931e63eb2a3a05938e5dfd47a5678447329b98b8486a2d1169cb3d1aba9" run: | cd hack/doc-site/hugo # Clone theme curl -sL -o relearn.tgz https://github.com/McShelby/hugo-theme-relearn/archive/refs/tags/"${RELEARN_VERSION}".tar.gz + # verify that the downloaded asset is the expected one + echo "${RELEARN_SUM} relearn.tgz" | sha256sum -c - tar xf relearn.tgz rm -rf themes/hugo-relearn mv "hugo-theme-relearn-${RELEARN_VERSION}" hugo-relearn