From e4ecb1bce54333197d57f37b028579278b42f729 Mon Sep 17 00:00:00 2001
From: yihong <zouzou0208@gmail.com>
Date: Tue, 7 Jul 2026 10:38:41 +0800
Subject: [PATCH] fix: ci failed (#4353)

---
 .github/workflows/build.yml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index d33081f44..ec94d0c96 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -297,6 +297,7 @@ jobs:
 
             read -r console_url console_sha256 < <("$python_bin" - "$console_json" <<'PY'
           import json
+          import re
           import sys
 
           with open(sys.argv[1], encoding="utf-8") as handle:
@@ -307,7 +308,10 @@ jobs:
               digest = asset.get("digest", "")
               url = asset.get("browser_download_url", "")
               if name.startswith("rustfs-console-") and name.endswith(".zip") and digest.startswith("sha256:") and url:
-                  print(url, digest.split(":", 1)[1])
+                  sha256 = digest.split(":", 1)[1]
+                  if not re.fullmatch(r"[0-9a-fA-F]{64}", sha256):
+                      raise SystemExit(f"console zip asset has invalid sha256 digest: {sha256}")
+                  sys.stdout.buffer.write(f"{url} {sha256}\n".encode("utf-8"))
                   break
           else:
               raise SystemExit("no console zip asset with sha256 digest found")