Merge pull request #37 from step-security/sha256

Use SHA 256 to verify tools

Author: varunsh-coder

dist/pre/index.js

@@ -1,6 +1,6 @@
 {
     "name": "step-security-harden-runner",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "description": "GitHub Actions Runtime Security",
     "main": "index.js",
     "scripts": {

dist/pre/index.js.map

@@ -49,7 +49,7 @@ import * as tc from "@actions/tool-cache";
     cp.execSync("sudo chown -R $USER /home/agent");
 
     const downloadPath: string = await tc.downloadTool(
-      "https://github.com/step-security/agent/releases/download/v0.4.0/agent_0.4.0_linux_amd64.tar.gz"
+      "https://github.com/step-security/agent/releases/download/v0.4.1/agent_0.4.1_linux_amd64.tar.gz"
     );
     const extractPath = await tc.extractTar(downloadPath);