ci: verify checksum of sccache

Author: pierwill

ci/docker/scripts/sccache.bash

@@ -3,13 +3,17 @@ set -xe
 
 VERSION=0.2.12
 TARGET=x86_64-unknown-linux-musl
+# from https://github.com/mozilla/sccache/releases
+SHA="26fd04c1273952cc2a0f359a71c8a1857137f0ee3634058b3f4a63b69fc8eb7f"
+DL_URL="https://github.com/mozilla/sccache/releases/download"
 BIN_DIR=/usr/local/bin
 TEMP_DIR=$(mktemp -d)
 
 cd "${TEMP_DIR}"
 mkdir -p "${BIN_DIR}"
 
-curl -sSL "https://github.com/mozilla/sccache/releases/download/${VERSION}/sccache-${VERSION}-${TARGET}.tar.gz" | \
+curl -sSL -O "${DL_URL}/${VERSION}/sccache-${VERSION}-${TARGET}.tar.gz"
+echo "${SHA}  sccache-${VERSION}-${TARGET}.tar.gz" | sha256sum --check -
 tar -xzf - --strip-components 1
 cp sccache "${BIN_DIR}/sccache"
 chmod +x "${BIN_DIR}/sccache"