axodotdev / axodotdev/cargo-dist

Support for checksum verification for `installer.ps1`

Open
#2,397 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Rust
Stars
2.1k
Forks
149
Avg merge
1d 11h
Merged PRs (30d)
32

Description

Currently, `installer.ps1` does not include any checksum verification for downloaded artifacts, unlike `installer.sh`

Contributor guide

Open the contributing guide

Research direction

Compare installer.ps1 with installer.sh to understand how downloaded artifacts are handled and how checksum verification is implemented in the shell installer. Add equivalent checksum verification to installer.ps1, then verify that downloaded artifacts are checked before installation.

Written by the indexing model from the issue text.

Assessment

Tech stack
powershell, shell
Domain
release, security
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
68/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.