Skip to content

Feature request: expose digests for assets in assets and json formats #193

@trk9001

Description

@trk9001

From the official announcement:

GitHub now automatically computes and displays SHA256 checksums (digests) for all uploaded release assets. These digests are generated at upload time, immutable, and let you verify that downloaded assets haven’t been altered since publishing. This improves integrity and transparency for every release.


In short, GitHub's Releases REST API now includes generated checksums for every asset. This would be incredibly useful to have in lastversion --format json or lastversion --format assets since it can help mitigate man-in-the-middle attacks and identify corrupted/damaged asset downloads.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions