Reputation: 3825
See for example https://github.com/grpc/grpc/releases. I see the commit SHAs but not the tarball SHAs.
Upvotes: 1
Views: 1127
Reputation: 76549
GitHub doesn't provide hashes for release tarballs and zip files. For the autogenerated source code archives (as opposed to additional release archives uploaded by the maintainer), you can use git archive
to produce an equivalent archive from the repository if you're concerned about integrity.
This probably would be a nice feature request for GitHub.
Upvotes: 1