aptible / aptible/supercronic

Include SHA256 and other Hashes in Release as Separate File (e.g. sha256sums File)

Open
#231 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
2.6k
Forks
147
PR merge metrics
No merged PRs in 30d

Description

It would be good to include `sha256sum` Values and other Hashes as Part of the Release Package in the form of a Separate File (e.g. as `sha256sums.txt`), besides being described in the Release Notes.

The purpose would be automatic CI/CD in Case somebody wants to build (like I intend to) a Docker Container automatically).

Alternatively one can use the GitHub API and fetch the Assets sha256 sums from there, e.g.:

* https://api.github.com/repos/aptible/supercronic/releases/latest
* https://api.github.com/repos/aptible/supercronic/releases/tags/v0.2.46

Then it can be used in your Automation as:
```
curl --silent https://api.github.com/repos/aptible/supercronic/releases/latest | jq -r '.assets[]? | select(.name == "supercronic-linux-amd64") | .digest'
```

or
```
curl --silent https://api.github.com/repos/aptible/supercronic/releases/tags/v0.2.46 | jq -r '.assets[]? | select(.name == "supercronic-linux-amd64") | .digest'
```

It would also be good to have an official Docker Image with some Variations (alpine,debian,distroless).

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by reviewing the GitHub release assets and API endpoints linked in the issue, along with the existing release process. Define the checksum file contents and naming from the current release artifacts, then verify that a release exposes the file and that its hashes can support the shown curl and jq automation.

Written by the indexing model from the issue text.

Assessment

Tech stack
docker, github
Domain
devops, release
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
48/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.