marketing-shibata50/cmux
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Verify GhosttyKit artifact integrity in CI/nightly/release workflows (#1032)

Browse source 
* Verify GhosttyKit checksum in build workflows

* Pin GhosttyKit checksums in build workflows

* Tighten GhosttyKit checksum guards
This commit is contained in:
Lawrence Chen 2026-03-07 02:23:23 -08:00 • committed by GitHub
parent 3432a4a941
commit 58bcc929b2
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
6 changed files with 220 additions and 96 deletions
Download patch file Download diff file Expand all files Collapse all files

4
scripts/ghosttykit-checksums.txt Normal file
View file

@ -0,0 +1,4 @@
# Pinned GhosttyKit.xcframework.tar.gz checksums keyed by ghostty submodule SHA.
# Update this file in a reviewed PR whenever the ghostty submodule SHA changes.
# Format: <ghostty_sha> <sha256>
7dd589824d4c9bda8265355718800cccaf7189a0 3915af4256850a0a7bee671c3ba0a47cbfee5dbfc6d71caf952acefdf2ee4207