Skip to content

chore: preserve IaC plugin download checksums#219

Merged
intel352 merged 1 commit into
mainfrom
issue-840-checksum-registry
Jun 3, 2026
Merged

chore: preserve IaC plugin download checksums#219
intel352 merged 1 commit into
mainfrom
issue-840-checksum-registry

Conversation

@intel352
Copy link
Copy Markdown
Contributor

@intel352 intel352 commented Jun 3, 2026

Summary

  • update registry sync and validation workflows to wfctl v0.74.1
  • restore sha256 values for AWS, GCP, and Azure v2.3.0 downloads from published checksums.txt files
  • keep IaC runner service metadata from the previous registry sync

Verification

  • bash scripts/validate-manifests.sh
  • bash scripts/categorize-manifests.sh --check
  • bash tests/test-build-index.sh
  • bash tests/test-schema-allowlist-coverage.sh
  • GOWORK=off go run ./cmd/wfctl plugin registry-sync readme --check --registry-dir /Users/jon/workspace/workflow-registry/.worktrees/issue-840-checksum-registry

Follow-up to #218 / GoCodeAlone/workflow#840.

Copilot AI review requested due to automatic review settings June 3, 2026 10:42
Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the registry to preserve IaC plugin download integrity metadata by restoring per-asset SHA-256 checksums for the AWS/GCP/Azure v2.3.0 plugin downloads and aligns the GitHub Actions validation/sync workflows to use wfctl v0.74.1.

Changes:

  • Add sha256 fields to downloads[] entries for AWS, Azure, and GCP plugin manifests (v2.3.0 assets).
  • Bump wfctl used by the validation and registry-sync GitHub Actions workflows to v0.74.1.

Reviewed changes

Copilot reviewed 5 out of 5 changed files in this pull request and generated no comments.

Show a summary per file
File Description
plugins/gcp/manifest.json Adds SHA-256 checksums for each published v2.3.0 GCP download artifact.
plugins/azure/manifest.json Adds SHA-256 checksums for each published v2.3.0 Azure download artifact.
plugins/aws/manifest.json Adds SHA-256 checksums for each published v2.3.0 AWS download artifact.
.github/workflows/validate.yml Updates CI validation workflow to install wfctl v0.74.1.
.github/workflows/sync-registry-manifests.yml Updates registry sync workflow to install wfctl v0.74.1.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@intel352 intel352 merged commit 38893f8 into main Jun 3, 2026
7 checks passed
@intel352 intel352 deleted the issue-840-checksum-registry branch June 3, 2026 10:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants