vrr/codeburn
2
0
Fork 0
mirror of https://github.com/AgentSeal/codeburn.git synced 2026-05-19 07:43:09 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Add SHA-256 checksum verification to menubar installer

Browse source 
The installer now downloads and verifies a .sha256 companion file
before extracting and launching the menubar app. Build script and
CI workflow generate the checksum alongside the zip. Adds SECURITY.md
with reporting instructions.

Addresses #215.
This commit is contained in:
iamtoruk 2026-05-04 10:08:58 -07:00
parent cf8c2aa493
commit 15334fac67
4 changed files with 73 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

4
.github/workflows/release-menubar.yml vendored
View file

@ -65,5 +65,7 @@ jobs:
quarantine, and launches it. If you download the zip from this page directly
and macOS shows "cannot verify developer", right-click the app in Finder and
pick Open to whitelist it once.
files: mac/.build/dist/CodeBurnMenubar-*.zip
files: |
mac/.build/dist/CodeBurnMenubar-*.zip
mac/.build/dist/CodeBurnMenubar-*.zip.sha256
fail_on_unmatched_files: true