This is an automated email from the ASF dual-hosted git repository.
shreemaan-abhishek pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/apisix.git
The following commit(s) were added to refs/heads/master by this push:
new ab8db465c fix(ci): verify LuaRocks tarball checksum before install
(#13526)
ab8db465c is described below
commit ab8db465c04e76f4a5617ce3280724c20a4bebc9
Author: Shreemaan Abhishek <[email protected]>
AuthorDate: Mon Jun 15 14:28:39 2026 +0800
fix(ci): verify LuaRocks tarball checksum before install (#13526)
---
utils/linux-install-luarocks.sh | 11 ++++++++---
1 file changed, 8 insertions(+), 3 deletions(-)
diff --git a/utils/linux-install-luarocks.sh b/utils/linux-install-luarocks.sh
index dc9f11020..4ddc42ddb 100755
--- a/utils/linux-install-luarocks.sh
+++ b/utils/linux-install-luarocks.sh
@@ -23,9 +23,14 @@ if [ -z ${OPENRESTY_PREFIX} ]; then
fi
LUAROCKS_VER=3.12.0
-wget -q https://github.com/luarocks/luarocks/archive/v"$LUAROCKS_VER".tar.gz
-tar -xf v"$LUAROCKS_VER".tar.gz
-rm -f v"$LUAROCKS_VER".tar.gz
+LUAROCKS_SHA256=745e3c5df2f955ecaf60ba1361cfc224564ef7ec210e9a784a3858ae853e9f7c
+LUAROCKS_TARBALL=v"$LUAROCKS_VER".tar.gz
+
+wget -q -O "$LUAROCKS_TARBALL"
https://github.com/luarocks/luarocks/archive/"$LUAROCKS_TARBALL";
+echo "$LUAROCKS_SHA256 $LUAROCKS_TARBALL" | sha256sum -c -
+
+tar -xf "$LUAROCKS_TARBALL"
+rm -f "$LUAROCKS_TARBALL"
cd luarocks-"$LUAROCKS_VER" || exit
OR_BIN="$OPENRESTY_PREFIX/bin/openresty"
