Use asfald in your Github Actions

Raphaël 2024-12-12

Asfaload develops a solution to help secure and authenticate downloads from the internet.

asfald, our tool to securely download from the internet, is now easily usable in your Github Actions thanks to our own asfald-action.

It uses our checksums mirror to increase the confidence you can have in downloaded files verified by checksums. You can now esasily install asfald to be used in your Gihub workflows. Here is an example:

name: Asfald Action Demo
on:
  workflow_dispatch:
jobs:
  install-fly-ctl:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/asfald-action@v0.1.0
      - run: |
          asfald https://github.com/superfly/flyctl/releases/download/v0.3.48/flyctl_0.3.48_Linux_x86_64.tar.gz

There’s no excuse now to download Github Releases artifacts without validating them. asfald does it transparently for you, the publishing project just has to include a checksums file in the release. And if the project you want to download a release from is not yet in our mirror, you can suggest it at https://collector.asfaload.com/suggest.