From f4e6873130fc32c7dba2eafd64cdcede7e5b816e Mon Sep 17 00:00:00 2001 From: Antoine Boxho Date: Thu, 22 Oct 2026 19:05:42 +0100 Subject: [PATCH] Merge pull request #1568 from C00kieMonsta/readme-official-source README: verify official releases and download checksums (fixes #1554) --- README.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/README.md b/README.md index 80b7d5ea..655b944f 100644 --- a/README.md +++ b/README.md @@ -289,6 +289,14 @@ See [ROADMAP.md](ROADMAP.md) for the stage, measured parity and the estimate of **Download CADCraft** from GitHub: the [latest release](https://github.com/storytold/cadcraft/releases/latest) has every build listed below, and [all releases](https://github.com/storytold/cadcraft/releases) has earlier versions and their notes. `` in the file names is the version number, and `SHA256SUMS.txt` lists a checksum for every file. +> [!WARNING] +> Download official CADCraft builds from the [storytold/cadcraft releases](https://github.com/storytold/cadcraft/releases). Verify that the repository owner is `storytold`. Before you run a download, check that its checksum matches the line for that file in the release's `SHA256SUMS.txt`: +> +> ```sh +> shasum -a 256 cadcraft--macos-universal.dmg # macOS (on Linux: sha256sum FILE) +> Get-FileHash .\cadcraft--windows-x64.msi # Windows PowerShell +> ``` + ### Windows | Build | Installer | Portable |