forked from wazuh/wazuh-docker
Changed yq installation method for url pre signed process
This commit is contained in:
@@ -190,21 +190,9 @@ jobs:
|
|||||||
run: |
|
run: |
|
||||||
sudo apt-get update
|
sudo apt-get update
|
||||||
sudo apt-get install -y jq
|
sudo apt-get install -y jq
|
||||||
# Install yq from a pinned version and verify its checksum
|
# Install yq
|
||||||
YQ_VERSION="v4.44.3"
|
sudo curl -sL "https://github.com/mikefarah/yq/releases/download/v4.44.3/yq_linux_amd64" -o /usr/local/bin/yq
|
||||||
YQ_BINARY="yq_linux_amd64"
|
sudo chmod +x /usr/local/bin/yq
|
||||||
YQ_BASE_URL="https://github.com/mikefarah/yq/releases/download/${YQ_VERSION}"
|
|
||||||
wget -q "${YQ_BASE_URL}/checksums" -O /tmp/yq_checksums
|
|
||||||
wget -q "${YQ_BASE_URL}/${YQ_BINARY}" -O /tmp/${YQ_BINARY}
|
|
||||||
EXPECTED_SHA256="$(grep " ${YQ_BINARY}$" /tmp/yq_checksums | awk '{print $1}')"
|
|
||||||
ACTUAL_SHA256="$(sha256sum /tmp/${YQ_BINARY} | awk '{print $1}')"
|
|
||||||
if [ -z "$EXPECTED_SHA256" ] || [ "$EXPECTED_SHA256" != "$ACTUAL_SHA256" ]; then
|
|
||||||
echo "yq checksum verification failed" >&2
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
sudo mv /tmp/${YQ_BINARY} /usr/bin/yq
|
|
||||||
sudo chmod +x /usr/bin/yq
|
|
||||||
rm -f /tmp/yq_checksums
|
|
||||||
sudo apt-get install -y python3-venv
|
sudo apt-get install -y python3-venv
|
||||||
python3 -m venv ${{ env.WORKFLOW_VENV }}
|
python3 -m venv ${{ env.WORKFLOW_VENV }}
|
||||||
source ${{ env.WORKFLOW_VENV }}/bin/activate
|
source ${{ env.WORKFLOW_VENV }}/bin/activate
|
||||||
|
|||||||
Reference in New Issue
Block a user