From 4839cba08e7472b87bc70c6c5acee18ece0048b5 Mon Sep 17 00:00:00 2001 From: Frederik Rothenberger Date: Mon, 18 Mar 2024 11:38:21 +0100 Subject: [PATCH] Mention proposal payload in hash verification This change adds a line to the hash verification instructions to remind people to also check the proposal payload. --- .github/actions/release/run.sh | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/actions/release/run.sh b/.github/actions/release/run.sh index 5b894938ee..fc8c38ff4f 100755 --- a/.github/actions/release/run.sh +++ b/.github/actions/release/run.sh @@ -40,6 +40,8 @@ git pull # to ensure you have the latest changes. git checkout $GITHUB_SHA ./scripts/verify-hash --ii-hash $(shasum -a 256 "$PRODUCTION_ASSET" | cut -d ' ' -f1) \`\`\` + +Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals. EOF # Read all "INPUT_ASSETS" (where "ASSETS" is the input specified in action.yml)