From c9b8141b6c502d14b4ec1760bd74ea78baf0ce8c Mon Sep 17 00:00:00 2001 From: Robbert van der Helm Date: Mon, 4 May 2020 22:32:44 +0200 Subject: [PATCH] Verify Boost's checksum in the build workflow --- .github/workflows/build.yml | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 31f06e89..f848150c 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -49,9 +49,10 @@ jobs: set -e cd /tmp - wget --max-redirect 3 https://dl.bintray.com/boostorg/release/1.72.0/source/boost_1_72_0.tar.bz2 - tar -xf boost_1_72_0.tar.bz2 - rm boost_1_72_0.tar.bz2 + wget --max-redirect 3 https://dl.bintray.com/boostorg/release/1.72.0/source/boost_1_72_0.tar.gz + sha256sum -c <<<"c66e88d5786f2ca4dbebb14e06b566fb642a1a6947ad8cc9091f9f445134143f boost_1_72_0.tar.gz" + tar -xf boost_1_72_0.tar.gz + rm boost_1_72_0.tar.gc cd boost_1_72_0 ./bootstrap.sh --with-toolset=gcc --with-icu --with-python=