Check SHA256 of bashio after download

hcpy2-0 · Oct 4, 2024 · c3a0bd4 · c3a0bd4
1 parent bbacc86
commit c3a0bd4
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -1,6 +1,7 @@
 FROM python:3.10-slim
 
 ARG BASHIO_VERSION="v0.16.2"
+ARG BASHIO_SHA256="d0f0c780c4badd103c00c572b1bf9645520d15a8a8070d6e3d64e35cb9f583aa"
 
 WORKDIR /app
 
@@ -13,6 +14,7 @@ RUN apt-get update && \
   apt-get autoremove -y \
     && curl -J -L -o /tmp/bashio.tar.gz \
         "https://github.com/hassio-addons/bashio/archive/${BASHIO_VERSION}.tar.gz" \
+    && echo "${BASHIO_SHA256} /tmp/bashio.tar.gz" | sha256sum --check \
     && mkdir /tmp/bashio \
     && tar zxvf \
         /tmp/bashio.tar.gz \