Open
Description
Feature Request
Is your feature request related to a problem? Please describe.
GitHub currently generates a corresponding SHA-256 hash for uploaded assets. You can retrieve it from the asset.digest property at https://api.github.com/repos/{owner}/{repo}/releases.
Refer to: https://docs.github.com/en/rest/releases/releases
Describe the solution you'd like
Manifest authors are not required to provide hash extraction for GitHub asset files.
Describe alternatives you've considered
For each GitHub manifest that lacks hash extraction, provide a hash extraction similar to the example below. However, it seems that the following JSONPath does not work as expected:
"hash": {
"url": "https://api.github.com/repos/{owner}/{repo}/releases",
"jsonpath": "$..assets[?(@.browser_download_url == '$url')].digest"
}