You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.md
+17-3Lines changed: 17 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -11,8 +11,20 @@ A GitHub Action to download and setup the Roc compiler for Linux and macOS.
11
11
12
12
Add this step to your CI workflow:
13
13
14
+
### Using Nightly Releases
15
+
16
+
```yaml
17
+
- uses: roc-lang/setup-roc@TODO
18
+
with:
19
+
version: nightly
20
+
```
21
+
22
+
### Using Major Releases
23
+
14
24
```yaml
15
-
TODO
25
+
- uses: roc-lang/setup-roc@TODO
26
+
with:
27
+
version: alpha4-rolling
16
28
```
17
29
18
30
## Platform Support
@@ -30,10 +42,12 @@ This action supports the following platforms:
30
42
31
43
1. Detects your operating system and architecture
32
44
2. Downloads the appropriate Roc compiler release for your platform
33
-
3. Verifies the SHA256 checksum to ensure file integrity
45
+
3. Verifies the SHA256 checksum to ensure file integrity (skipped for nightly releases)
34
46
4. Extracts the compiler
35
47
5. Adds the Roc executable to the PATH
36
48
37
49
## Security
38
50
39
-
The action verifies the SHA256 checksum of the downloaded file to ensure it hasn't been tampered with. If the checksum doesn't match, the action will fail.
51
+
For major releases, the action verifies the SHA256 checksum of the downloaded file to ensure it hasn't been tampered with. If the checksum doesn't match, the action will fail.
52
+
53
+
For nightly releases, SHA256 verification is skipped since the files are updated regularly.
echo "This should never happen and could mean the file is malicious. Please make a post on <https://roc.zulipchat.com> and request investigation of this incident."
84
-
exit 1
85
-
fi
96
+
if [[ "$ACTUAL_SHA" != "$EXPECTED_SHA" ]]; then
97
+
echo "Error: SHA256 checksum mismatch!"
98
+
echo "Expected: $EXPECTED_SHA"
99
+
echo "Actual: $ACTUAL_SHA"
100
+
echo "This should never happen and could mean the file is malicious. Please make a post on <https://roc.zulipchat.com> and request investigation of this incident."
101
+
exit 1
102
+
fi
86
103
87
-
echo "SHA256 checksum verified successfully"
104
+
echo "SHA256 checksum verified successfully"
105
+
else
106
+
echo "Skipping SHA256 verification for nightly release"
0 commit comments