commit:     24744c624e30b298f9897f135786c5f23cec40a4
Author:     Florian Albrechtskirchinger <falbrechtskirchinger <AT> gmail <DOT> 
com>
AuthorDate: Thu Jan 15 15:53:24 2026 +0000
Commit:     Florian Albrechtskirchinger <falbrechtskirchinger <AT> gmail <DOT> 
com>
CommitDate: Thu Jan 15 15:53:24 2026 +0000
URL:        https://gitweb.gentoo.org/repo/proj/guru.git/commit/?id=24744c62

dev-util/google-antigravity: improve verify-sig

1) Merge a grep & awk call.
2) Match full version string instead of prefix.

Signed-off-by: Florian Albrechtskirchinger <falbrechtskirchinger <AT> gmail.com>

 .../google-antigravity-1.14.2.ebuild               | 22 +++++++++++-----------
 1 file changed, 11 insertions(+), 11 deletions(-)

diff --git a/dev-util/google-antigravity/google-antigravity-1.14.2.ebuild 
b/dev-util/google-antigravity/google-antigravity-1.14.2.ebuild
index c164436297..2d2c4d563c 100644
--- a/dev-util/google-antigravity/google-antigravity-1.14.2.ebuild
+++ b/dev-util/google-antigravity/google-antigravity-1.14.2.ebuild
@@ -97,24 +97,24 @@ src_unpack() {
                verify-sig_verify_message "${FILESDIR}/InRelease" Release || \
                        die "InRelease signature verification failed"
 
-               sed -n '/^SHA256:/,/^[^ ]/p' Release                 \
-                       | grep "binary-${ARCH}/Packages"                        
      \
-                       | awk -v f="${FILESDIR}/Packages.${ARCH}" '{print $1 "  
" f}' \
-                       | sha256sum --check --strict - || die "Packages hash 
mismatch"
+               sed -n '/^SHA256:/,/^[^ ]/p' Release                       \
+                       | awk -v f="${FILESDIR}/Packages.${ARCH}"              \
+                               '/binary-'"${ARCH}"'\/Packages/ {print $1 "  " 
f}' \
+                       | sha256sum -c --strict - || die "Packages hash 
mismatch"
 
                local version="${PV}-"
                use amd64 && version+="${BUILD_ID_AMD64}"
                use arm64 && version+="${BUILD_ID_ARM64}"
                awk -v v="${version}" -v f="${DISTDIR}/${P}_${ARCH}.deb" \
-                       'BEGIN {RS=""} index($0, "Version: " v) {
-                               for (i=1; i<=NF; ++i) {
-                                       if ($i == "SHA256:") {
-                                               print $(i+1) "  " f
-                                               exit
-                                       }
+                       'BEGIN {RS=""} {
+                               m=0; h=""
+                               for(i=1; i<NF; ++i) {
+                                       if ($i == "Version:" && $(i+1) == v) m=1
+                                       if ($i == "SHA256:") { h=$(i+1); break }
                                }
+                               if (m && h) { print h "  " f; exit }
                        }' "${FILESDIR}/Packages.${ARCH}" \
-                       | sha256sum --check --strict - || die ".deb archive 
hash mismatch"
+                       | sha256sum -c --strict - || die ".deb archive hash 
mismatch"
        fi
 }
 

Reply via email to