ci: add lima dependency hash check

Signed-off-by: Austin Vazquez <[email protected]>

Makefile

@@ -123,6 +123,13 @@ lima-and-qemu: networks.yaml
 	mkdir -p $(OUTDIR)/downloads
 	# download artifacts
 	curl -L $(LIMA_URL) > $(OUTDIR)/downloads/lima-and-qemu.tar.gz
+	curl -L $(LIMA_URL).sha512sum > $(OUTDIR)/downloads/lima-and-qemu.tar.gz.sha512sum
+
+	# validate shasum for lima artifact
+	(shasum --algorithm 512 $(OUTDIR)/downloads/lima-and-qemu.tar.gz | \
+		cut -d ' ' -f 1 | \
+		grep -xq "^$$(cat $(OUTDIR)/downloads/lima-and-qemu.tar.gz.sha512sum)$$") || \
+		(echo "error: shasum verification failed for lima dependency" && exit 1)
 
 	# Untar LIMA
 	tar -xvf $(OUTDIR)/downloads/lima-and-qemu.tar.gz -C $(OUTDIR)/lima/