🔨 checksum script

Author: pboling

CHANGELOG.md

@@ -17,6 +17,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
   - funding_uri
   - mailing_list_uri
 - Installation and usage documentation (@pboling)
+- Checksums for released gems (@pboling)
+### Changed
+- Gem releases are now cryptographically signed (@pboling)
 
 ## [1.0.3] - 2022-09-06
 ### Fixed

bin/checksum

@@ -0,0 +1,13 @@
+#!/usr/bin/env ruby
+# frozen_string_literal: true
+
+require 'digest/sha2'
+gems = Dir['*.gem']
+puts "Found: #{gems.inspect}"
+raise 'Too Many Gems' if gems.length > 1
+
+built_gem_path = gems.first
+checksum = Digest::SHA512.new.hexdigest(File.read(built_gem_path))
+checksum_path = "checksum/#{built_gem_path}.sha512"
+File.open(checksum_path, 'w') { |f| f.write(checksum) }
+puts "You must now git add and commit '#{checksum_path}'"