From 6a4d020c274b3aa9f0139d7dd71dce17133ab7f2 Mon Sep 17 00:00:00 2001
From: Dalton <dalton@cloudflare.com>
Date: Wed, 22 Jul 2020 20:17:28 -0500
Subject: [PATCH] AUTH-2016 adds sha256 hashes to releases

---
 github_release.py | 33 +++++++++++++++++++++++++++++++++
 1 file changed, 33 insertions(+)

diff --git a/github_release.py b/github_release.py
index 6ced8032..88505e07 100755
--- a/github_release.py
+++ b/github_release.py
@@ -6,6 +6,7 @@ Creates Github Releases and uploads assets
 import argparse
 import logging
 import os
+import hashlib
 
 from github import Github, GithubException, UnknownObjectException
 
@@ -15,6 +16,30 @@ logging.basicConfig(format=FORMAT)
 CLOUDFLARED_REPO = os.environ.get("GITHUB_REPO", "cloudflare/cloudflared")
 GITHUB_CONFLICT_CODE = "already_exists"
 
+def get_sha256(filename):
+    """ get the sha256 of a file """
+    sha256_hash = hashlib.sha256()
+    with open(filename,"rb") as f:
+        for byte_block in iter(lambda: f.read(4096),b""):
+            sha256_hash.update(byte_block)
+        return sha256_hash.hexdigest()
+
+
+def update_or_add_message(msg, name, sha):
+    """ 
+    updates or builds the github version message for each new asset's sha256. 
+    Searches the existing message string to update or create. 
+    """
+    new_text = '{0}: {1}\n'.format(name, sha)
+    start = msg.find(name)
+    if (start != -1):
+        end = msg.find("\n", start)
+        if (end != -1):
+            return msg.replace(msg[start:end+1], new_text)
+    back = msg.rfind("```")
+    if (back != -1):
+        return '{0}{1}```'.format(msg[:back], new_text)
+    return '{0} \n### SHA256 Checksums:\n```\n {1}```'.format(msg, new_text)
 
 def assert_tag_exists(repo, version):
     """ Raise exception if repo does not contain a tag matching version """
@@ -120,6 +145,14 @@ def main():
             return
 
         release.upload_asset(args.path, name=args.name)
+
+        # add the sha256 of the new artifact to the release message body
+        pkg_hash = get_sha256(args.path)
+
+        # update the release body text
+        msg = update_or_add_message(release.body, args.name, pkg_hash)
+        release.update_release(version, version, msg)
+
     except Exception as e:
         logging.exception(e)
         exit(1)