From f3a702014c5a0d3715c02649ca169c5a0d3f9a0d Mon Sep 17 00:00:00 2001
From: Joe Becher <71270647+drazisil-codecov@users.noreply.github.com>
Date: Thu, 3 Jun 2021 09:32:45 -0400
Subject: [PATCH] ci: download and compare hashes for node binary (#101)

* ci: download and compare hashes for node binary
---
 .circleci/config.yml | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 5a6205b5b..851a9fdb9 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -73,9 +73,13 @@ jobs:
       - run:
           name: Download prebuilt static node binary
           command: |
-            apk add wget
-            wget https://github.com/codecov/node-static-alpine/releases/download/node.v14.16.1_0b668b007c0533fa4be1b24c66941a06f5965fdf/node
-
+            apk add wget coreutils
+            NODE_RELEASE=node.v14.16.1_0b668b007c0533fa4be1b24c66941a06f5965fdf
+            wget https://github.com/codecov/node-static-alpine/releases/download/$NODE_RELEASE/node
+            wget https://github.com/codecov/node-static-alpine/releases/download/$NODE_RELEASE/SHA1SUM
+            wget https://github.com/codecov/node-static-alpine/releases/download/$NODE_RELEASE/SHA256SUM
+            wget https://github.com/codecov/node-static-alpine/releases/download/$NODE_RELEASE/SHA512SUM
+            for i in 1 256 512; do "sha${i}sum" -c "SHA${i}SUM"; done
       - run:
           name: Confirm that alpine node binary is static
           command: |