From 3d9958df6b7f538558bf875208e3bb9cafdd732c Mon Sep 17 00:00:00 2001
From: Sylvester Kaczmarek
 <16242628+sylvesterkaczmarek@users.noreply.github.com>
Date: Tue, 18 Aug 2026 09:20:24 +0100
Subject: [PATCH] fix: validate update-tool binary identities

---
 script/validate-update-tools | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/script/validate-update-tools b/script/validate-update-tools
index 916567a8..2624236c 100755
--- a/script/validate-update-tools
+++ b/script/validate-update-tools
@@ -48,6 +48,10 @@ while IFS='|' read -r name binary version url crate_sha256 crate_lockfile_sha256
     *) die "unexpected update-tool lock entry: $name" ;;
   esac
 
+  if [[ "$binary" != "$name" ]]; then
+    die "${name} binary mismatch (expected ${name}, found ${binary})"
+  fi
+
   version_file="$TOOLING_DIR/${name}-version"
   expected_version="$(read_version_file "$version_file")"
   if [[ "$version" != "$expected_version" ]]; then