Chore: check shasum when installing snyk cli on our workflow

sandor-trombitas · Jul 10, 2024 · 09bd562 · 09bd562
1 parent 4c833bd
commit 09bd562
Showing 1 changed file with 5 additions and 3 deletions.
diff --git a/.github/workflows/snyk.yml b/.github/workflows/snyk.yml
@@ -9,9 +9,11 @@ jobs:
 
     - name: Install Snyk CLI
       run: |
-        curl https://static.snyk.io/cli/latest/snyk-linux -o snyk
-        chmod +x snyk
-        sudo mv snyk /usr/local/bin/
+        curl https://static.snyk.io/cli/latest/snyk-linux -o snyk-linux
+        curl https://static.snyk.io/cli/latest/snyk-linux.sha256 -o snyk.sha256
+        sha256sum -c snyk.sha256
+        chmod +x snyk-linux
+        sudo mv snyk-linux /usr/local/bin/snyk
 
     - name: Authenticate Snyk CLI
       run: |