Add SHAs for our downloads

Add a SHA256 hash for the Debian and tarball downloads. Closes #127.

1 files changed, 7 insertions, 1 deletions

diff --git a/README.md b/README.md
index ccfeb5f..5da70cb 100644
--- a/README.md
+++ b/README.md
@@ -21,6 +21,8 @@ Arch Linux:
 Debian-based:
 
     wget https://thoughtbot.github.io/rcm/debs/rcm_1.2.3-1_all.deb
+    sha=$(sha256sum rcm_1.2.3-1_all.deb | cut -f1 -d' ')
+    [ "$sha" = "fb8ec2611cd4d519965b66fcf950bd93d7593773659f83a8612053217daa38b4" ] && \
     sudo dpkg -i rcm_1.2.3-1_all.deb
 
 Gentoo-based (including Funtoo):
@@ -50,7 +52,11 @@ Elsewhere:
 
 This uses the standard GNU autotools, so it's the normal dance:
 
-    wget https://thoughtbot.github.io/rcm/dist/rcm-1.2.3.tar.gz && \
+    curl -LO https://thoughtbot.github.io/rcm/dist/rcm-1.2.3.tar.gz && \
+
+    sha=$(sha256 rcm-1.2.3.tar.gz | cut -f1 -d' ') && \
+    [ "$sha" = "502fd44e567ed0cfd00fb89ccc257dac8d6eb5d003f121299b5294c01665973f" ] && \
+
     tar -xvf rcm-1.2.3.tar.gz && \
     cd rcm-1.2.3 && \