[Aikido] Fix security issue in jackc/pgx/v5 via minor version upgrade from 5.8.0 to 5.9.0 in instrumentation #231
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: 🔍 Check zen-internals binary is up to date | |
| on: | |
| push: | |
| branches: | |
| - main | |
| pull_request: | |
| permissions: | |
| contents: read | |
| jobs: | |
| check-zen-internals: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@v5 | |
| - name: Check zen-internals binary matches version in Makefile | |
| run: | | |
| VERSION=$(grep '^ZEN_INTERNALS_VERSION=' Makefile | cut -d= -f2) | |
| echo "ZEN_INTERNALS_VERSION: $VERSION" | |
| BASE_URL="https://github.com/AikidoSec/zen-internals/releases/download/${VERSION}" | |
| EXPECTED=$(curl -fsSL "${BASE_URL}/libzen_internals.wasm.sha256sum") | |
| COMMITTED=$(cat internal/zeninternals/libzen_internals.wasm.sha256sum) | |
| if [ "$EXPECTED" != "$COMMITTED" ]; then | |
| echo "Error: committed sha256sum does not match version ${VERSION}" | |
| echo "Expected: $EXPECTED" | |
| echo "Got: $COMMITTED" | |
| echo "" | |
| echo "Run 'make binaries' and commit the updated binary." | |
| exit 1 | |
| fi | |
| echo "Binary matches version ${VERSION}" |