From 4778834fb4c75a465e814ab76e6d5a0746d10ab2 Mon Sep 17 00:00:00 2001 From: ivonaest Date: Tue, 30 Jun 2026 11:55:21 +0100 Subject: [PATCH] Add checksum verification for SOPS binary in e2e workflows Signed-off-by: ivonaest --- .github/workflows/e2e-azure.yaml | 4 +++- .github/workflows/e2e-gcp.yaml | 4 +++- 2 files changed, 6 insertions(+), 2 deletions(-) diff --git a/.github/workflows/e2e-azure.yaml b/.github/workflows/e2e-azure.yaml index 8093dd80..46f95d3b 100644 --- a/.github/workflows/e2e-azure.yaml +++ b/.github/workflows/e2e-azure.yaml @@ -43,10 +43,12 @@ jobs: - name: Setup SOPS run: | mkdir -p $HOME/.local/bin - wget -O $HOME/.local/bin/sops https://github.com/mozilla/sops/releases/download/v$SOPS_VER/sops-v$SOPS_VER.linux + wget -O $HOME/.local/bin/sops https://github.com/getsops/sops/releases/download/v$SOPS_VER/sops-v$SOPS_VER.linux + echo "$SOPS_CHECKSUM $HOME/.local/bin/sops" | sha256sum -c - chmod +x $HOME/.local/bin/sops env: SOPS_VER: 3.7.1 + SOPS_CHECKSUM: "185348fd77fc160d5bdf3cd20ecbc796163504fd3df196d7cb29000773657b74" - name: Authenticate to Azure uses: Azure/login@532459ea530d8321f2fb9bb10d1e0bcf23869a43 # v1.4.6 with: diff --git a/.github/workflows/e2e-gcp.yaml b/.github/workflows/e2e-gcp.yaml index e87a3921..abfde36f 100644 --- a/.github/workflows/e2e-gcp.yaml +++ b/.github/workflows/e2e-gcp.yaml @@ -43,10 +43,12 @@ jobs: - name: Setup SOPS run: | mkdir -p $HOME/.local/bin - wget -O $HOME/.local/bin/sops https://github.com/mozilla/sops/releases/download/v$SOPS_VER/sops-v$SOPS_VER.linux + wget -O $HOME/.local/bin/sops https://github.com/getsops/sops/releases/download/v$SOPS_VER/sops-v$SOPS_VER.linux + echo "$SOPS_CHECKSUM $HOME/.local/bin/sops" | sha256sum -c - chmod +x $HOME/.local/bin/sops env: SOPS_VER: 3.7.1 + SOPS_CHECKSUM: "185348fd77fc160d5bdf3cd20ecbc796163504fd3df196d7cb29000773657b74" - name: Authenticate to Google Cloud uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3.0.0 id: 'auth'