Problem to solve
Find a specific job’s artifact checksum to validate it’s integrity.
- for example, this provides a web page for a given artifact:
https://gitlab.com/<group>/<project>/-/jobs/<ci_gitlab_job>/artifacts/file/<path>/<file>
- and this provides the raw directly downloadable URL (
sed -e 's/file/raw/'
)
https://gitlab.com/<group>/<project>/-/jobs/<ci_gitlab_job>/artifacts/raw/<path>/<file>
- checksum url ?
I couldn’t find an URL that would give access to the corresponding checksum (that, if I am correct, seems to exist internally since it’s used for the geo duplication tool…)
Configuration
(any CI that produces an artifact)
Versions
- GitLab.com SaaS
- Self-hosted Runners
I hope it does exist already
This would be very helpful to validate the deployment of a specific binary generated by the CI