Pull request overview
This PR adds SHA256 checksum validation to the install script to verify the integrity of downloaded releases. The validation occurs after downloading the tarball but before extracting it, providing an additional security layer.
Key changes:
- Downloads SHA256SUMS.txt file from the release and validates the tarball checksum
- Supports both versioned and latest release URLs
- Gracefully handles cases where checksums are unavailable or validation tools are missing
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Originally posted by @Copilot in #794 (review)
Pull request overview
This PR adds SHA256 checksum validation to the install script to verify the integrity of downloaded releases. The validation occurs after downloading the tarball but before extracting it, providing an additional security layer.
Key changes:
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Originally posted by @Copilot in #794 (review)