Downloads and verifies official Godot binaries against known SHA-512 checksums to make sure they haven't been tampered with.
- SHA-512 checksum files are committed in this repository for this each release.
Each file is a concatenation of the standard and Mono release checksum files.
- For example, for 3.4.2, the checksum URLs used are:
- Every day at midnight (UTC), a scheduled GitHub Actions workflow is run.
- The workflow downloads all files for some given releases, then verifies their checksums.
- If any file is missing or its checksum does not match the one stored in this repository, then CI will fail.
Copyright © 2022 Hugo Locurcio and contributors
Unless otherwise specified, files in this repository are licensed under the MIT license. See LICENSE.md for more information.