Validate downloaded Coverity tool checksum

Issue-ID: CIMAN-260
Signed-off-by: Artem Naluzhnyy <A.Naluzhnyy@samsung.com>
Change-Id: I73dae5c4c5bd3dd73957809b4265009b529ebca0

diff --git a/shell/maven-coverity.sh b/shell/maven-coverity.sh
index 76ba423..e319b06 100644 (file)
--- a/shell/maven-coverity.sh
+++ b/shell/maven-coverity.sh
@@ -57,6 +57,20 @@ curl \
   --output 'coverity_tool.tgz' \
   'https://scan.coverity.com/download/linux64'
 
+curl \
+  --verbose \
+  --silent \
+  --show-error \
+  --fail \
+  --form "project=${COVERITY_PROJECT_NAME}" \
+  --form "token=${COVERITY_TOKEN}" \
+  --form 'md5=1' \
+  --output 'coverity_tool.md5' \
+  'https://scan.coverity.com/download/linux64'
+
+echo -n ' coverity_tool.tgz' >> 'coverity_tool.md5'
+md5sum --check 'coverity_tool.md5'
+
 tar \
   --extract \
   --gunzip \