Use asfald in your Github Actions
2024-12-12 news githubAsfaload develops a solution to help secure and authenticate downloads from the internet.
It uses our checksums mirror to increase the confidence you can have in downloaded files verified by checksums. You can now esasily install asfald to be used in your Gihub workflows. Here is an example:
name: Asfald Action Demo
on:
workflow_dispatch:
jobs:
install-fly-ctl:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: actions/asfald-action@v0.1.0
- run: |
asfald https://github.com/superfly/flyctl/releases/download/v0.3.48/flyctl_0.3.48_Linux_x86_64.tar.gz
There’s no excuse now to download Github Releases artifacts without validating them. asfald
does it transparently for you, the publishing project just has to include a checksums file in the release.
And if the project you want to download a release from is not yet in our mirror, you can suggest it at https://collector.asfaload.com/suggest.