jutty
291081359e
Some checks are pending
/ verify (push) Waiting to run
While this moves the source of truth for CI tooling versions to somewhere outside the workflow definitions, it also avoids duplication and keeps debug (check.yaml) and production (publish.yaml) verifications fully independent.
42 lines
1.3 KiB
Bash
Executable file
42 lines
1.3 KiB
Bash
Executable file
#!/usr/bin/env sh
|
|
|
|
set -eu
|
|
|
|
JUST_VERSION="1.45.0"
|
|
JUST_SHA256SUM="dc3f958aaf8c6506dd90426e9b03f86dd15e74a6467ee0e54929f750af3d9e49"
|
|
CARGO_LLVM_COV_VERSION="0.6.21"
|
|
CARGO_LLVM_COV_SHA256SUM="57f491aedf7cdb261538ceb49cbb1ee9d27df7ca205a5e1a009caaf5cb911afb"
|
|
CARGO_AUDIT_VERSION="0.22.1"
|
|
CARGO_AUDIT_SHA256SUM="1890badd5f15831a9af4b074399fcd21e6f7c0fe42c84e9254cdffc9f813765c"
|
|
|
|
TRIPLE="x86_64-unknown-linux-gnu"
|
|
TRIPLE_MUSL="x86_64-unknown-linux-musl"
|
|
|
|
fetch() {
|
|
repo="$1"; tag="$2"; filename="$3"; digest="$4"; binary="$5"
|
|
|
|
[ -d /tmp/tools ] || mkdir -p /tmp/tools
|
|
|
|
curl -sSLO --output-dir /tmp \
|
|
-w '%{stderr}HTTP %{response_code} %{url}\n' \
|
|
"https://github.com/$repo/releases/download/$tag/$filename"
|
|
|
|
printf '%s %s\n' "$digest" "/tmp/$filename" > /tmp/digest
|
|
sha256sum --check /tmp/digest
|
|
tar xf "/tmp/$filename" -C /tmp/tools
|
|
find /tmp/tools -type f -executable -name "$binary" \
|
|
-exec mv '{}' /usr/local/bin ';'
|
|
}
|
|
|
|
fetch casey/just "$JUST_VERSION" \
|
|
"just-$JUST_VERSION-$TRIPLE_MUSL.tar.gz" \
|
|
"$JUST_SHA256SUM" just
|
|
|
|
fetch taiki-e/cargo-llvm-cov "v$CARGO_LLVM_COV_VERSION" \
|
|
"cargo-llvm-cov-$TRIPLE.tar.gz" \
|
|
"$CARGO_LLVM_COV_SHA256SUM" cargo-llvm-cov
|
|
|
|
fetch rustsec/rustsec "v$CARGO_AUDIT_VERSION" \
|
|
"cargo-audit-$TRIPLE-v$CARGO_AUDIT_VERSION.tgz" \
|
|
"$CARGO_AUDIT_SHA256SUM" cargo-audit
|
|
|