Update verify.ts

Proposed fix from coderabbitai

Author: tcely

src/verify.ts

@@ -49,6 +49,8 @@ export async function verifyAsset(
   algorithm: SupportedAlgorithmNames = "sha256",
 ): Promise<void> {
   const manifestFile = getManifest(algorithm);
+  const urlObj = new URL(downloadUrl);
+  let assetName = urlObj.pathname.split("/").pop();
 
   /**
    * 1. Establish the Local Baseline.
@@ -71,6 +73,7 @@ export async function verifyAsset(
   let manifestBaseUrl = "";
   try {
     const metadata = await fetchAssetMetadata(downloadUrl, token);
+    assetName = meta.name;
     manifestBaseUrl = getGitHubManifestUrl(
       metadata.owner,
       metadata.repo,
@@ -83,7 +86,7 @@ export async function verifyAsset(
      * with GitHub's infrastructure hash.
      */
     if (metadata.updated_at >= GITHUB_DIGEST_THRESHOLD) {
-      info(`Verifying via asset metadata: ${metadata.name}`);
+      info(`Verifying via asset metadata: ${assetName}`);
       if (metadata.digest) {
         const githubHash = getHexFromDigest(metadata.digest);
         if (githubHash !== actualHash) {
@@ -137,13 +140,13 @@ export async function verifyAsset(
     .split(/\r?\n/)
     .map((line) => line.match(/^([A-Fa-f0-9]+) [* ](.+)$/))
     .find(
-      (m): m is RegExpMatchArray => Boolean(m) && m[2].trim() === metadata.name,
+      (m): m is RegExpMatchArray => Boolean(m) && m[2].trim() === assetName,
     );
 
   if (!manifestMatch) {
     silentUnlink(zipPath);
     throw new Error(
-      `No verified hash found for ${metadata.name} in the signed manifest.`,
+      `No verified hash found for ${assetName} in the signed manifest.`,
     );
   }
 
@@ -163,7 +166,7 @@ export async function verifyAsset(
     );
   }
 
-  info(`Successfully verified ${metadata.name} (PGP + SHA256)`);
+  info(`Successfully verified ${assetName} (PGP + SHA256)`);
 }
 
 function silentUnlink(filePath: string): void {