Skip to content

Commit c3a7dd0

Browse files
Copilotswissspidy
andcommitted
Fix checksum verification instructions to match actual file format
Co-authored-by: swissspidy <[email protected]>
1 parent 1951336 commit c3a7dd0

File tree

1 file changed

+8
-9
lines changed

1 file changed

+8
-9
lines changed

guides/verifying-downloads.md

Lines changed: 8 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -106,19 +106,15 @@ Or for a specific release:
106106
curl -LO https://github.com/wp-cli/wp-cli/releases/download/v2.12.0/wp-cli-2.12.0.phar.sha512
107107
```
108108

109-
Verify the checksum on Linux/macOS:
110-
111-
```bash
112-
sha512sum -c wp-cli.phar.sha512
113-
```
114-
115-
Or manually compare:
109+
Verify the checksum by comparing the output:
116110

117111
```bash
118112
sha512sum wp-cli.phar
119113
cat wp-cli.phar.sha512
120114
```
121115

116+
The two hashes should match exactly.
117+
122118
#### Using SHA-256
123119

124120
Download the SHA-256 checksum file:
@@ -133,12 +129,15 @@ Or for a specific release:
133129
curl -LO https://github.com/wp-cli/wp-cli/releases/download/v2.12.0/wp-cli-2.12.0.phar.sha256
134130
```
135131

136-
Verify the checksum:
132+
Verify the checksum by comparing the output:
137133

138134
```bash
139-
sha256sum -c wp-cli.phar.sha256
135+
sha256sum wp-cli.phar
136+
cat wp-cli.phar.sha256
140137
```
141138

139+
The two hashes should match exactly.
140+
142141
**Note:** Checksum verification only confirms the file matches the published checksum. It does not verify that the file was created by the WP-CLI maintainers. For complete security, use GPG signature verification.
143142

144143
## Where to find verification files

0 commit comments

Comments
 (0)