Test checksums from package create

Signed-off-by: Philip Laine <philip.laine@gmail.com>

.github/workflows/test-package-create.yml

@@ -0,0 +1,45 @@
+name: Test Package Create Checksums
+
+on:
+  pull_request:
+  merge_group:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: package-create-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  test-checksums:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
+
+      - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
+        with:
+          go-version-file: go.mod
+
+      - name: Build Zarf
+        run: make build
+
+      - name: Build examples
+        run: make build-examples ARCH=amd64
+
+      - name: Compare checksums
+        run: |
+          set -e
+
+          for f in build/*.tar.zst
+          do 
+            CHECKSUM=$(tar Oxf $f checksums.txt | grep -v sboms.tar)
+            NAME=$(basename $f .tar.zst)
+            EXPECTED_CHECKSUM=$(cat examples-checksums/$NAME.txt | grep -v sboms.tar)
+            if [ "$CHECKSUM" != "$EXPECTED_CHECKSUM" ]
+            then
+              echo "Package $f does not have expected checksum."
+              exit 1
+            fi
+          done

examples-checksums/zarf-package-argocd-amd64.txt

@@ -0,0 +1,44 @@
+043c1b533762974c2b73f63a8b410ac96e28b326d13d9cf8545e8d84b521f033 images/blobs/sha256/043c1b533762974c2b73f63a8b410ac96e28b326d13d9cf8545e8d84b521f033
+0a34d7c44fe60c6ba273c0cddc26d1571a5ccd69280623a66b70393231a9eed9 images/blobs/sha256/0a34d7c44fe60c6ba273c0cddc26d1571a5ccd69280623a66b70393231a9eed9
+0ec9fcfedc8ea74fee8e910c764274211574ffec14b074344b7cd9762b25c659 components/argocd-helm-chart.tar
+1136d67a330455863b5dee60b8fbb092663ef6e46317b213d2fa3b14e636c1b6 images/blobs/sha256/1136d67a330455863b5dee60b8fbb092663ef6e46317b213d2fa3b14e636c1b6
+12cba3a8e34081029e840e7ac5454c080835cbc5a7adc1620482e939283a3a49 images/blobs/sha256/12cba3a8e34081029e840e7ac5454c080835cbc5a7adc1620482e939283a3a49
+1573d64ce6fde3599878b7ccf6850c249f17599f2a6d1bb248d67095b4c80abd images/blobs/sha256/1573d64ce6fde3599878b7ccf6850c249f17599f2a6d1bb248d67095b4c80abd
+15f469a6f69979694769ab1e6782be40facca74ea7ad74e01f2a6a5c72e307f6 images/blobs/sha256/15f469a6f69979694769ab1e6782be40facca74ea7ad74e01f2a6a5c72e307f6
+196f78a43281340584e91d5ea4454aa6daaf5fa54d20b8a6b4bdf969dbca50aa images/blobs/sha256/196f78a43281340584e91d5ea4454aa6daaf5fa54d20b8a6b4bdf969dbca50aa
+26997ab04178102d8549deff0abfcfb9455bd6a6e6f6a6723d3493d53d5a9097 images/blobs/sha256/26997ab04178102d8549deff0abfcfb9455bd6a6e6f6a6723d3493d53d5a9097
+3153aa388d026c26a2235e1ed0163e350e451f41a8a313e1804d7e1afb857ab4 images/blobs/sha256/3153aa388d026c26a2235e1ed0163e350e451f41a8a313e1804d7e1afb857ab4
+39cb2d0e4a79e7bcec7cfe8db20cbe45066601ba8998416bd216c9b06d5cc9c6 sboms.tar
+426f6fb54a1b82a2254bce70e5f4a72d15c14ecd3cc70d799465b956e7a32548 images/blobs/sha256/426f6fb54a1b82a2254bce70e5f4a72d15c14ecd3cc70d799465b956e7a32548
+43c4264eed91be63b206e17d93e75256a6097070ce643c5e8f0379998b44f170 images/blobs/sha256/43c4264eed91be63b206e17d93e75256a6097070ce643c5e8f0379998b44f170
+4db1b89c0bd13344176ddce2d093b9da2ae58336823ffed2009a7ea4b62d2a95 images/blobs/sha256/4db1b89c0bd13344176ddce2d093b9da2ae58336823ffed2009a7ea4b62d2a95
+4f4fb700ef54461cfa02571ae0db9a0dc1e0cdb5577484a6d75e68dc38e8acc1 images/blobs/sha256/4f4fb700ef54461cfa02571ae0db9a0dc1e0cdb5577484a6d75e68dc38e8acc1
+59a14b8803b635434bf10cecb432287fd56c0fd3a0a0e959613451d2069311ce images/blobs/sha256/59a14b8803b635434bf10cecb432287fd56c0fd3a0a0e959613451d2069311ce
+6610c8ae2d1b1b77ac5ebb066246062f99070432e0f3092a93d14f4f3b15b1fd images/index.json
+685091e88e8b7a0d371b3752a4035447f30d2749faf84e4f4156fcca315a96ee images/blobs/sha256/685091e88e8b7a0d371b3752a4035447f30d2749faf84e4f4156fcca315a96ee
+71ec19a4537d9533b4d6e4232b17d6e014a5426696bfad754dd6b11bf4b79ce0 images/blobs/sha256/71ec19a4537d9533b4d6e4232b17d6e014a5426696bfad754dd6b11bf4b79ce0
+77c5444a93a34e5c9192311a5683bbed8219e04245bc2030a778908993049963 images/blobs/sha256/77c5444a93a34e5c9192311a5683bbed8219e04245bc2030a778908993049963
+7b5b7198d2664dee1aedd0d85ed182421446e50105bf47b8be62f07973521ba5 images/blobs/sha256/7b5b7198d2664dee1aedd0d85ed182421446e50105bf47b8be62f07973521ba5
+7d521a4de7e1be026e7016bf46cb010beb0960b9b9c8135a7ff9064d07d354d7 images/blobs/sha256/7d521a4de7e1be026e7016bf46cb010beb0960b9b9c8135a7ff9064d07d354d7
+83e445690a15c8f99f682f655248506a406bef5836122a4ea26cb85542f27a82 images/blobs/sha256/83e445690a15c8f99f682f655248506a406bef5836122a4ea26cb85542f27a82
+8c1861f37de177b38f3fa0052b9d5d7b9b5c632b32cc7c06aa12018dec5b075c images/blobs/sha256/8c1861f37de177b38f3fa0052b9d5d7b9b5c632b32cc7c06aa12018dec5b075c
+92974acd1b7d5aec7654a2df3a310f97c56b7449fc5d042ba8442dbace9a0da6 images/blobs/sha256/92974acd1b7d5aec7654a2df3a310f97c56b7449fc5d042ba8442dbace9a0da6
+a41ecb74577da29dd9d28d092677dc9abe078de69ebb597d3b54bc7fe4aa54e3 images/blobs/sha256/a41ecb74577da29dd9d28d092677dc9abe078de69ebb597d3b54bc7fe4aa54e3
+a87a16adadc5bb54a06708312ad122a66cf49d87f41da7b84845cab45c4f1fe4 images/blobs/sha256/a87a16adadc5bb54a06708312ad122a66cf49d87f41da7b84845cab45c4f1fe4
+ab89818c3a147b985f7ccb42b4bbd2b6041cf2b1015384ce5f9e84bab6c301d9 images/blobs/sha256/ab89818c3a147b985f7ccb42b4bbd2b6041cf2b1015384ce5f9e84bab6c301d9
+b4cd0df67c961ba7f49c86c2e1e6e89d2fd1b8c40ad6fe59508db060dfac51fe images/blobs/sha256/b4cd0df67c961ba7f49c86c2e1e6e89d2fd1b8c40ad6fe59508db060dfac51fe
+b66dbb27a73334db6ac9c030475837bd7f4472d835c72b2360534b203edce6cb images/oci-layout
+bfb6d79c1db0bbbaf79e0547a541262ab6abd5d25e45a2768f1066bfb3fdc004 images/blobs/sha256/bfb6d79c1db0bbbaf79e0547a541262ab6abd5d25e45a2768f1066bfb3fdc004
+c398742ba22c44f9bbc08dcbbdf0c978b20928fde49dceacded095bc09a46b84 images/blobs/sha256/c398742ba22c44f9bbc08dcbbdf0c978b20928fde49dceacded095bc09a46b84
+c964a8407bde0d4abb59e3cec0b556983dba8a0429bb9c9cf6b53ea0ee5dce8c images/blobs/sha256/c964a8407bde0d4abb59e3cec0b556983dba8a0429bb9c9cf6b53ea0ee5dce8c
+d1702fb9f16a0f14da00b6efa5ea20be6884e77e7779c3da4224d374accaf1a8 images/blobs/sha256/d1702fb9f16a0f14da00b6efa5ea20be6884e77e7779c3da4224d374accaf1a8
+d36b479c6b1036fdc7ea595f72be351e5adf86e0a6f79cbe33e6a195b2ef3144 components/argocd-apps.tar
+d37d27b92cce4fb1383d5fbe32540382ea3d9662c7be3555f5a0f6a044099e1b images/blobs/sha256/d37d27b92cce4fb1383d5fbe32540382ea3d9662c7be3555f5a0f6a044099e1b
+d69f65dec1f95340bf42cde13fb84d3971aabf28df7ef7ce83e199264ec9f981 images/blobs/sha256/d69f65dec1f95340bf42cde13fb84d3971aabf28df7ef7ce83e199264ec9f981
+d8173b5b3d825c1c19acf91cb66599f453187705ca9cdb4608d7be5482768cba images/blobs/sha256/d8173b5b3d825c1c19acf91cb66599f453187705ca9cdb4608d7be5482768cba
+d95fa8da986254bcd64c1251b695fe91875383dac1ed1780480fdf70f02cea3b images/blobs/sha256/d95fa8da986254bcd64c1251b695fe91875383dac1ed1780480fdf70f02cea3b
+de95bfdc7068c512c720f77872f001cefbb7e91e7f0c2dec9c578a9af2f849f7 images/blobs/sha256/de95bfdc7068c512c720f77872f001cefbb7e91e7f0c2dec9c578a9af2f849f7
+e7898cd05251d2af51380cbf50c9613748440fe6406e28e027846875b941c2de images/blobs/sha256/e7898cd05251d2af51380cbf50c9613748440fe6406e28e027846875b941c2de
+e869140c6e63f7d73119ab40c3881af181bc7e03a41747c5f28dad4809a1b2b9 images/blobs/sha256/e869140c6e63f7d73119ab40c3881af181bc7e03a41747c5f28dad4809a1b2b9
+f20170ca6353fcef1c6b73e061bd9151a26f7b6921684dab8355c4472ad0232f images/blobs/sha256/f20170ca6353fcef1c6b73e061bd9151a26f7b6921684dab8355c4472ad0232f
+f414c5344bf3ec6777b84aa6e1e32838cf7a8a5ea5cc12a9489c14ee51b449a6 images/blobs/sha256/f414c5344bf3ec6777b84aa6e1e32838cf7a8a5ea5cc12a9489c14ee51b449a6

examples-checksums/zarf-package-component-actions-amd64.txt

@@ -0,0 +1,4 @@
+a0efa3c6279bda9256b629e551afe169b7ddcf418a40b2754a1966f04fa680e8 sboms.tar
+cfd67a2aeebf13c632207183e1d5cd57146a28aa22b5ddf8896c6ce593c627c2 components/on-deploy-with-wait-action.tar
+d26e18c92ff9f93b296fad6be153f02d4a746f0ec44dbcf4c526f1e121ffe4ec components/on-remove.tar
+fbfcd7215652819a3b03084d2a12ca7594d8c610ac6e2ebed2f229a0019a52e2 components/on-deploy-with-template-use-of-variable.tar

examples-checksums/zarf-package-component-choice-amd64.txt

@@ -0,0 +1,3 @@
+c921236de186124ba0c52bc84f0357ef2c1e62373eea0ef9e62e8d832dbc3950 sboms.tar
+fa862d90928e52ccc9faa69b5eae73bb97fa5acb76407ba6a177eb338f7d692d components/first-choice.tar
+fb99083f2881d87f556c1a7a163876aeaaf1e6094526ff50b2775fc85f8858a3 components/second-choice.tar

examples-checksums/zarf-package-dos-games-amd64-1.1.0.txt

@@ -0,0 +1,9 @@
+0a44b759e219d9d6f3c7cbbf40c57ede71a1f9bf54da65767c4137be74727662 images/blobs/sha256/0a44b759e219d9d6f3c7cbbf40c57ede71a1f9bf54da65767c4137be74727662
+4752b809555b8767401dfd39638f256c2373763a1f2cc421012301bb48481e6d images/blobs/sha256/4752b809555b8767401dfd39638f256c2373763a1f2cc421012301bb48481e6d
+49f63464352d7b53ceea3b60b9cc764c1a810b28217ee9f13ab7f974bb3ed968 components/baseline.tar
+4f4fb700ef54461cfa02571ae0db9a0dc1e0cdb5577484a6d75e68dc38e8acc1 images/blobs/sha256/4f4fb700ef54461cfa02571ae0db9a0dc1e0cdb5577484a6d75e68dc38e8acc1
+704b2fa9ff847cda365986263c537c778080851039399f276af56163e23c153a sboms.tar
+b66dbb27a73334db6ac9c030475837bd7f4472d835c72b2360534b203edce6cb images/oci-layout
+c7d63f829f7a467667ede9779bd3faf19a37baf211cfbc3ac51f5f36131ce5b7 images/index.json
+cc1421ef2ded4a559feaefe8dc266488d60675fcc995db7e51f0b0a6d893e010 images/blobs/sha256/cc1421ef2ded4a559feaefe8dc266488d60675fcc995db7e51f0b0a6d893e010
+e6886dc0b01f09d19480a3270fd9e7c4b261346cee9490b881b36edf21c7e722 images/blobs/sha256/e6886dc0b01f09d19480a3270fd9e7c4b261346cee9490b881b36edf21c7e722

examples-checksums/zarf-package-git-data-amd64-0.0.1.txt

@@ -0,0 +1,5 @@
+0b3d5b875bad2306b86d0f8386d31cbf0240018dbd874d1d629a8de754097803 components/specific-tag.tar
+4f584281ada9e69ae7fd03e62ff49a63a38e3f619bca29c74419117f8e2fca80 components/specific-branch.tar
+8ff507dcea2ec52b179398931e6f30d35121defd7e5615dc005c21eaf8853749 components/specific-hash.tar
+9d83cc6b623654338dc89c8d84d2bfcec119dc46cf06b0dde4b3934332344bf3 components/full-repo.tar
+9f3f02e684b7fe56949e48843bdf36fa7e0cc8825e0071348d5bb5c98db7cd12 sboms.tar

examples-checksums/zarf-package-helm-charts-amd64-0.0.1.txt

@@ -0,0 +1,16 @@
+12cba3a8e34081029e840e7ac5454c080835cbc5a7adc1620482e939283a3a49 images/blobs/sha256/12cba3a8e34081029e840e7ac5454c080835cbc5a7adc1620482e939283a3a49
+186fb3baff7ffca40a614b97b9616069cc340a4a969be69aab4eb03a713deffc sboms.tar
+3e84ea487b4c52a3299cf2996f70e7e1721236a0998da33a0e30107108486b3e images/blobs/sha256/3e84ea487b4c52a3299cf2996f70e7e1721236a0998da33a0e30107108486b3e
+4db1b89c0bd13344176ddce2d093b9da2ae58336823ffed2009a7ea4b62d2a95 images/blobs/sha256/4db1b89c0bd13344176ddce2d093b9da2ae58336823ffed2009a7ea4b62d2a95
+4f4fb700ef54461cfa02571ae0db9a0dc1e0cdb5577484a6d75e68dc38e8acc1 images/blobs/sha256/4f4fb700ef54461cfa02571ae0db9a0dc1e0cdb5577484a6d75e68dc38e8acc1
+6162308b7421163281afe8bd1c69ae16d50e675cbe93ff8b34f8ad5efb71a866 images/blobs/sha256/6162308b7421163281afe8bd1c69ae16d50e675cbe93ff8b34f8ad5efb71a866
+92974acd1b7d5aec7654a2df3a310f97c56b7449fc5d042ba8442dbace9a0da6 images/blobs/sha256/92974acd1b7d5aec7654a2df3a310f97c56b7449fc5d042ba8442dbace9a0da6
+b2e57644dc70555c90d0aabb9a7f4515174e109b9391c2e23d8757e9a7580b28 images/index.json
+b4cd0df67c961ba7f49c86c2e1e6e89d2fd1b8c40ad6fe59508db060dfac51fe images/blobs/sha256/b4cd0df67c961ba7f49c86c2e1e6e89d2fd1b8c40ad6fe59508db060dfac51fe
+b66dbb27a73334db6ac9c030475837bd7f4472d835c72b2360534b203edce6cb images/oci-layout
+c398742ba22c44f9bbc08dcbbdf0c978b20928fde49dceacded095bc09a46b84 images/blobs/sha256/c398742ba22c44f9bbc08dcbbdf0c978b20928fde49dceacded095bc09a46b84
+cb03d9ef0fc8b4a5669cdcf652c23670f93bd1bd4f1431a57ad4917d894a90e2 images/blobs/sha256/cb03d9ef0fc8b4a5669cdcf652c23670f93bd1bd4f1431a57ad4917d894a90e2
+d37d27b92cce4fb1383d5fbe32540382ea3d9662c7be3555f5a0f6a044099e1b images/blobs/sha256/d37d27b92cce4fb1383d5fbe32540382ea3d9662c7be3555f5a0f6a044099e1b
+d8173b5b3d825c1c19acf91cb66599f453187705ca9cdb4608d7be5482768cba images/blobs/sha256/d8173b5b3d825c1c19acf91cb66599f453187705ca9cdb4608d7be5482768cba
+d95fa8da986254bcd64c1251b695fe91875383dac1ed1780480fdf70f02cea3b images/blobs/sha256/d95fa8da986254bcd64c1251b695fe91875383dac1ed1780480fdf70f02cea3b
+dfe3f61cbe37c2593c29cdb28d45d614a2c72157ae71896a1f33cda0221b2048 components/demo-helm-charts.tar

examples-checksums/zarf-package-manifests-amd64-0.0.1.txt

@@ -0,0 +1,28 @@
+0f23e58bd0b7c74311703e20c21c690a6847e62240ed456f8821f4c067d3659b images/blobs/sha256/0f23e58bd0b7c74311703e20c21c690a6847e62240ed456f8821f4c067d3659b
+12cba3a8e34081029e840e7ac5454c080835cbc5a7adc1620482e939283a3a49 images/blobs/sha256/12cba3a8e34081029e840e7ac5454c080835cbc5a7adc1620482e939283a3a49
+2018950c2a1efeccd5c7d46cbfb0ff99af3d1cbb468a53e5e8a611a29baa88e9 images/index.json
+27833a3ba0a545deda33bb01eaf95a14d05d43bf30bce9267d92d17f069fe897 images/blobs/sha256/27833a3ba0a545deda33bb01eaf95a14d05d43bf30bce9267d92d17f069fe897
+295c7be079025306c4f1d65997fcf7adb411c88f139ad1d34b537164aa060369 images/blobs/sha256/295c7be079025306c4f1d65997fcf7adb411c88f139ad1d34b537164aa060369
+3a96ca29c7fb133e78765557b2bf29a257467f679c43e4153ad05bcde8a1ce3d images/blobs/sha256/3a96ca29c7fb133e78765557b2bf29a257467f679c43e4153ad05bcde8a1ce3d
+45ef08258efc940f6336384ae1f35224b5bdf89a3b7abbb5effcbb6c5d62cabe components/nginx-remote.tar
+466aa416a9022ae87d814c1bea939cb0a56b16dbda035e942e96aca06f323722 sboms.tar
+489db2792d7fc3ed75b6970b2e0e73f782bd5c0ed2462ddd683ae92cce04cdb6 images/blobs/sha256/489db2792d7fc3ed75b6970b2e0e73f782bd5c0ed2462ddd683ae92cce04cdb6
+4db1b89c0bd13344176ddce2d093b9da2ae58336823ffed2009a7ea4b62d2a95 images/blobs/sha256/4db1b89c0bd13344176ddce2d093b9da2ae58336823ffed2009a7ea4b62d2a95
+4f4fb700ef54461cfa02571ae0db9a0dc1e0cdb5577484a6d75e68dc38e8acc1 images/blobs/sha256/4f4fb700ef54461cfa02571ae0db9a0dc1e0cdb5577484a6d75e68dc38e8acc1
+706446e9c6667c0880d5da3f39c09a6c7d2114f5a5d6b74a2fafd24ae30d2078 images/blobs/sha256/706446e9c6667c0880d5da3f39c09a6c7d2114f5a5d6b74a2fafd24ae30d2078
+8ca774778e858d3f97d9ec1bec1de879ac5e10096856dc22ed325a3ad944f78a images/blobs/sha256/8ca774778e858d3f97d9ec1bec1de879ac5e10096856dc22ed325a3ad944f78a
+92974acd1b7d5aec7654a2df3a310f97c56b7449fc5d042ba8442dbace9a0da6 images/blobs/sha256/92974acd1b7d5aec7654a2df3a310f97c56b7449fc5d042ba8442dbace9a0da6
+9926d2e1a82b13f28b6b9c720bb6947b34c8eabc943de113a3fbc8fabee82d94 images/blobs/sha256/9926d2e1a82b13f28b6b9c720bb6947b34c8eabc943de113a3fbc8fabee82d94
+9b61d3667e8d8d1d8f14ebb413c1ac3fe62373fd69af6aafb281b7a8733f50aa images/blobs/sha256/9b61d3667e8d8d1d8f14ebb413c1ac3fe62373fd69af6aafb281b7a8733f50aa
+ae8092b154d705e09bc77523083da3e93200a476ae3aa2b7a5e1747b1cbb8fef images/blobs/sha256/ae8092b154d705e09bc77523083da3e93200a476ae3aa2b7a5e1747b1cbb8fef
+b4cd0df67c961ba7f49c86c2e1e6e89d2fd1b8c40ad6fe59508db060dfac51fe images/blobs/sha256/b4cd0df67c961ba7f49c86c2e1e6e89d2fd1b8c40ad6fe59508db060dfac51fe
+b66dbb27a73334db6ac9c030475837bd7f4472d835c72b2360534b203edce6cb images/oci-layout
+b9c1296647242c2c9c7ffe8cc3a1b9ecde558e8748969ad6a64428ab5922769a images/blobs/sha256/b9c1296647242c2c9c7ffe8cc3a1b9ecde558e8748969ad6a64428ab5922769a
+c398742ba22c44f9bbc08dcbbdf0c978b20928fde49dceacded095bc09a46b84 images/blobs/sha256/c398742ba22c44f9bbc08dcbbdf0c978b20928fde49dceacded095bc09a46b84
+c926b61bad3b94ae7351bafd0c184c159ebf0643b085f7ef1d47ecdc7316833c images/blobs/sha256/c926b61bad3b94ae7351bafd0c184c159ebf0643b085f7ef1d47ecdc7316833c
+cadc8652ff5abccc918746eb742e7b9165a48428b2c8cc6a48eb6ce782ce5405 images/blobs/sha256/cadc8652ff5abccc918746eb742e7b9165a48428b2c8cc6a48eb6ce782ce5405
+d37d27b92cce4fb1383d5fbe32540382ea3d9662c7be3555f5a0f6a044099e1b images/blobs/sha256/d37d27b92cce4fb1383d5fbe32540382ea3d9662c7be3555f5a0f6a044099e1b
+d8173b5b3d825c1c19acf91cb66599f453187705ca9cdb4608d7be5482768cba images/blobs/sha256/d8173b5b3d825c1c19acf91cb66599f453187705ca9cdb4608d7be5482768cba
+d95fa8da986254bcd64c1251b695fe91875383dac1ed1780480fdf70f02cea3b images/blobs/sha256/d95fa8da986254bcd64c1251b695fe91875383dac1ed1780480fdf70f02cea3b
+f55cf5db16c790710ce2cd7b3d4fa00db89bdeea9d516aa83a596e910de103b2 components/podinfo-kustomize.tar
+f59dcac0742ce66d707aed956c25cd0fc20d162ecaca308637197eac1cef13fc components/httpd-local.tar