diff options
Diffstat (limited to 'scripts/packages/chocolatey/tools/VERIFICATION.txt')
| -rw-r--r-- | scripts/packages/chocolatey/tools/VERIFICATION.txt | 17 |
1 files changed, 17 insertions, 0 deletions
diff --git a/scripts/packages/chocolatey/tools/VERIFICATION.txt b/scripts/packages/chocolatey/tools/VERIFICATION.txt new file mode 100644 index 0000000000..807e60688c --- /dev/null +++ b/scripts/packages/chocolatey/tools/VERIFICATION.txt @@ -0,0 +1,17 @@ +VERIFICATION +Verification is intended to assist the Chocolatey moderators and community +in verifying that this package's contents are trustworthy. + +Download the zip file from github releases +Take its sha256 +If it matches what is in package's chocolateyinstall.ps1, it's authentic. + +Example: + +``` +invoke-webrequest https://github.com/bazelbuild/bazel/releases/0.3.1/bazel_0.3.1_windows_x86_64.zip -outfile bazel_0.3.1_windows_x86_64.zip +get-filehash bazel_0.3.1_windows_x86_64.zip -algorithm sha256 +# compare that to what's in <package>/tools/chocolateyinstall.ps1 +``` + +See also package build script `<repo>/scripts/packages/chocolatey/buildAndInstall.ps1`. |