Providing release assets in github release.

[kimxogus]

To enhance security against software supply‑chain attacks, please provide the install script files (e.g. install_script_agent7.sh, install_script_agent6.sh) along with checksum files (e.g. SHA‑256) in the GitHub Releases for this repository.

Then we can validate checksum like this.

$ curl -O https://github.com/DataDog/agent-linux-install-script/releases/download/1.39.0/install_script_agent7.sh  
$ curl -O https://github.com/DataDog/agent-linux-install-script/releases/download/1.39.0/install_script_agent7.sh.sha256  
$ sha256sum --check install_script_agent7.sh.sha256

[fanny-jiang]

Hi @kimxogus, we don't include the install script in the github release as assets because we want to ensure that customers are always using the latest install script when they access the script from our hosted server.

Alternatively, we can provide a checksum to download with the install script.