Fix Dockerfile checksum verification - #131

Open

besendorf wants to merge 2 commits into

mainfrom

fix/dockerfile-checksum

besendorf commented Sep 18, 2026

Collaborator

Summary

Pin the Alpine base image digest.
Verify the downloaded release binary against checksums.txt before installing it.
Rename the binary only after checksum verification succeeds.

Validation

go test ./...
Docker image build not run because Docker is unavailable in the development environment.

Fixes #129

besendorf added 2 commits

September 18, 2026 10:45


          Verify Docker release checksum before install

6f47013


          Merge origin/main and resolve Dockerfile conflict

bb97790

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet