Skip to content

fix(ci): verify downloaded documentation tools - #73

Merged
Martin Taillefer (geeknoid) merged 1 commit into
microsoft:mainfrom
psandana:users/psandana/doc-tool-integrity
Oct 26, 2026
Merged

Martin Taillefer (geeknoid) merged 1 commit into
microsoft:mainfrom
psandana:users/psandana/doc-tool-integrity

Conversation

@psandana

Copy link
Copy Markdown
Contributor

Summary

  • Pin SHA-256 digests for the existing mdBook v0.4.40 and mdbook-linkcheck v0.7.7 release archives.
  • Verify each downloaded archive before extraction or execution.
  • Make curl fail on HTTP errors, and quote writes to GITHUB_PATH.

Tool versions and the documentation build flow remain unchanged. A failed download or checksum mismatch stops the job before the archive is extracted.

Pin SHA-256 digests for the existing mdBook and mdbook-linkcheck release
archives. Check each archive before extraction and fail on HTTP errors.

Keep the tool versions unchanged and quote writes to GITHUB_PATH.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: 36ce5c31-ff70-4dc0-ada2-79a9b4bbd22d
@geeknoid
Martin Taillefer (geeknoid) merged commit 9585e28 into microsoft:main Oct 26, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants