linux

How to Upgrade Swiftlint

Step 1: Find the hash of the new swiftlint binary

Go on the Swiftlint repo's releases page, go to the "Assets" section, and download the portable_swiftlint.zip file. Then open a terminal and get the md5 hash:

# macos 
md5 -q  portable_swiftlint.zip

# linux
md5sum portable_swiftlint.

Copy the hash.

Why is the md5 has important?

Swiftlint is often used in CI environments, which have access to sensitive data. An attacker attempt a MitM attack to replace the version of Swiftlint installed by this Danger plugin. By checking the hash of the Swiftlint version, we seek to mitigate this attack vector. See #170 for more.

Step 2: Update the Hash

Edit /lib/version.rb and change the following values:

• SWIFTLINT_VERSION to the version of SwiftLint you're updating too.
• SWIFTLINT_HASH to the hash value from Step 1.

Then open a PR. Thank you for your contribution!