From 302aa85ad23a9947ede7375f536488f409deace3 Mon Sep 17 00:00:00 2001
From: Ryan Ghadimi <114221941+GhadimiR@users.noreply.github.com>
Date: Tue, 11 Mar 2025 11:26:57 +0000
Subject: [PATCH] Add warning on digest validation failure

---
 src/download-artifact.ts | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/src/download-artifact.ts b/src/download-artifact.ts
index aedfe12..71852f3 100644
--- a/src/download-artifact.ts
+++ b/src/download-artifact.ts
@@ -117,7 +117,8 @@ async function run(): Promise<void> {
       path:
         isSingleArtifactDownload || inputs.mergeMultiple
           ? resolvedPath
-          : path.join(resolvedPath, artifact.name)
+          : path.join(resolvedPath, artifact.name),
+      expectedHash: artifact.digest
     })
   )
 
@@ -126,6 +127,15 @@ async function run(): Promise<void> {
     await Promise.all(chunk)
   }
 
+  for (const dlPromise of downloadPromises) {
+    const outcome = await dlPromise
+    if (outcome.digestMismatch) {
+      core.warning(
+        `Artifact digest validation failed. Please verify the integrity of the artifact.`
+      )
+    }
+  }
+
   core.info(`Total of ${artifacts.length} artifact(s) downloaded`)
   core.setOutput(Outputs.DownloadPath, resolvedPath)
   core.info('Download artifact has finished successfully')