Test checksums from package create #8

	name: Test Package Create Checksums

	on:
	pull_request:
	merge_group:

	permissions:
	contents: read

	concurrency:
	group: package-create-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	test-checksums:
	runs-on: ubuntu-latest
	steps:
	- name: Checkout
	uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1

	- uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
	with:
	go-version-file: go.mod

	- name: Build Zarf
	run: make build

	- name: Build examples
	run: make build-examples ARCH=amd64

	- name: Compare checksums
	run: \|
	set -e

	for f in build/*.tar.zst
	do
	CHECKSUM=$(tar Oxf $f checksums.txt \| grep -v sboms.tar)
	NAME=$(basename $f .tar.zst)
	EXPECTED_CHECKSUM=$(cat examples-checksums/$NAME.txt \| grep -v sboms.tar)
	if [ "$CHECKSUM" != "$EXPECTED_CHECKSUM" ]
	then
	echo "Package $f does not have expected checksum."
	exit 1
	fi
	done

Provide feedback