[stable31] fix: verify integrity with URL override but allow to disable if needed #850

	# SPDX-FileCopyrightText: 2022 Nextcloud GmbH and Nextcloud contributors
	# SPDX-License-Identifier: MIT
	name: Check same code base

	on:
	pull_request:
	push:
	branches:
	- main
	- master
	- stable*

	permissions:
	contents: read

	jobs:
	php-lint:
	runs-on: ubuntu-latest
	strategy:
	matrix:
	php-versions: ["8.2"]

	name: check-same-code-base

	steps:
	- name: Checkout
	uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
	with:
	fetch-depth: 0

	- name: Set up php ${{ matrix.php-versions }}
	uses: shivammathur/setup-php@c5fc0d8281aba02c7fda07d3a70cc5371548067d # v2
	with:
	php-version: ${{ matrix.php-versions }}
	coverage: none
	ini-file: development
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

	- name: Install dependencies
	run: composer i

	- name: check-same-code-base
	run: make check-same-code-base

	- name: check-updater-phar
	run: \|
	./vendor/bin/box info -l updater.phar \| grep -v "^Signature Hash" \| grep -v "^ Version.php " \| grep -v "^Contents: " \| grep -v "^ installed.php " > updater.old.txt
	make updater.phar
	./vendor/bin/box info -l updater.phar \| grep -v "^Signature Hash" \| grep -v "^ Version.php " \| grep -v "^Contents: " \| grep -v "^ installed.php " > updater.txt
	diff updater.txt updater.old.txt

Provide feedback