Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/falk-werner/fetch
Download artifact and verify it's checksum.
https://github.com/falk-werner/fetch
checksum cli command-line command-line-tool curl download fetch md5 sha256 tool wget
Last synced: 1 day ago
JSON representation
Download artifact and verify it's checksum.
- Host: GitHub
- URL: https://github.com/falk-werner/fetch
- Owner: falk-werner
- License: mit
- Created: 2025-01-17T23:09:29.000Z (9 days ago)
- Default Branch: main
- Last Pushed: 2025-01-25T14:46:10.000Z (1 day ago)
- Last Synced: 2025-01-25T15:23:35.872Z (1 day ago)
- Topics: checksum, cli, command-line, command-line-tool, curl, download, fetch, md5, sha256, tool, wget
- Language: Rust
- Homepage:
- Size: 112 KB
- Stars: 0
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
[](https://github.com/falk-werner/fetch/actions/workflows/build.yaml)
[](https://snapcraft.io/fetch)
# fetch
Downloads an aritfact from a URL and optionally verifies it's SHA256 or MD5 checksum.
## Usage
```bash
fetch -L $SOME_URL --sha256 $SHA256_HASH
```
## Motivation
A typical use case is to download an artifact from a URL and verify it's checksum afterwards.
Unfortunately, there is no commonly used tool which provides this in one step. There are
multiple feature requests on commonly used tools such as [curl](https://curl.se/), which
were closed due to a lack of interest (see [here](https://github.com/curl/curl/issues/6836)
or [here](https://github.com/curl/curl/issues/1399)).
On the other hand, popular tools such as [rustup](https://rustup.rs/) and
[node.js](https://nodejs.org/en/download) propose dangerous workflows for installations,
where a direct download is piped into a shell:
```bash
url --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh
```
It would be nice to enhance security of those workflows by verifiing a MD5 oder SHA256
checksum during download.
This can be achieved using the `fetch` utility.
## Command Line Options
```bash
fetch [OPTIONS]
```
Command line options are strongly inspired by [curl](https://curl.se/).
While `fetch` does not use all options that `curl` provides, the options `fetch` provides are
named the same as `curl`'s options. Therefore, `fetch` can be used as drop-in replacement for
`curl` in most use cases.
| Option | Type | Description |
| ------ | ---- | ----------- |
| -o, --output | Path | Write to file instead of stdout |
| -X, --request | HTTP Method | Specify the request method to use |
| -H, --header | string | Pass custom header(s) to server |
| -d, --data | string | Post data |
| -F, --form | string | Specify multipart form data as name=value pair |
| -K, --insecure | flag | Allow insecure server connections |
| -L, --location | flag | Follow redirects |
| --max-redirs | uint | Maximum number of redirects |
| --max-filesize | uint | Maximum file size to download |
| --connection-timeout | uint | Maximum time allowed for connection in seconds |
| -m, --max-time | uint | Maximum time allowed for transfer in seconds |
| --sha256 | hex-string | SHA256 checksum of the artifact to download |
| --md5 | hex-string | MD5 checksum of the artifact to download |
| -h, --help | flag | Print help |
| -V, --version | flag | Print version |
# Run tests
In order to run tests, [bats](https://github.com/bats-core/bats-core) is needed.
Please install `bats` and build `fetch` before running the tests.
```bash
bats test
```