Strip sha256 hash

2026-10-14 20:16:50 +02:00
parent 3d36d550c7
commit 40f4a7d19e
2 changed files with 1 additions and 3 deletions
@@ -19,8 +19,6 @@ jobs:
      - name: Install kubectl
        run: |
          curl -fsSL -o "${RUNNER_TEMP}/kubectl" "https://dl.k8s.io/release/${KUBECTL_VERSION}/bin/linux/amd64/kubectl"
-          curl -fsSL -o "${RUNNER_TEMP}/kubectl.sha256" "https://dl.k8s.io/release/${KUBECTL_VERSION}/bin/linux/amd64/kubectl.sha256"
-          printf '%s  %s\n' "$(cat "${RUNNER_TEMP}/kubectl.sha256")" "${RUNNER_TEMP}/kubectl" | sha256sum -c
          chmod 0700 "${RUNNER_TEMP}/kubectl"
      - name: Configure Kubernetes access
        env:
@@ -8,7 +8,7 @@ if grep -R -q 'cloudflare-api-credentials' "$dir/.gitea/workflows"; then
  echo 'CI must never read or apply the ignored credential manifest.' >&2
  exit 1
 fi
-image=ghcr.io/yannh/kubeconform:v0.7.0@sha256:85dbef6b4b312b99133decc9c6fc9495e9fc5f92293d4ff3b7e1b30f5611823c
+image=ghcr.io/yannh/kubeconform:v0.7.0
 for file in cloudflare.yaml http-issuer.yaml certificates.yaml; do docker run --rm -i "$image" -strict -exit-on-error -ignore-missing-schemas -summary < "$dir/$file"; done
 docker run --rm -i "$image" -strict -exit-on-error -summary < "$dir/ci-deployer.yaml"
 echo 'cert-manager configuration is valid; no credential file is tracked by CI.'