check-shasum.yaml

name: Check shasum

on:
  push:
    branches: [ '*' ]
    paths: [ 'upkg.sh', 'README.md', '.github/workflows/check-shasum.yaml' ]
  pull_request:
    branches: [ '*' ]
    paths: [ 'upkg.sh', 'README.md', '.github/workflows/check-shasum.yaml' ]

jobs:
  lint:
    name: Check shasum
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v3
      with:
        fetch-depth: 0
    - name: Checkout the ref referenced in README.md
      run: git checkout -q "$(grep -m1 'wget -qO- https' README.md | sed 's#^.*orbit-online/upkg/\([^/]\+\)/upkg\.sh.*$#\1#')"
    - name: Check if the shasum from README.md matches the shasum of upkg.sh
      run: printf '%s  upkg.sh\n' "$(grep -m1 'shasum -a 256' README.md | sed 's/^.*\([a-f0-9]\{64\}\).*$/\1/')" | shasum -a 256 -c -