artifact_verify_checksum_integrity
Verifies artifact integrity by comparing expected SHA256 against registry checksum, blocking deployment if tampering or corruption is detected.
Instructions
Compare the SHA256 digest generated by CI against registry checksum before deployment.
Verifies cryptographic attestation: compares the expected SHA256 (produced by github-mcp GitHub Actions or jenkins-mcp build jobs) against the checksum stored in Nexus or Artifactory. Blocks deployment if tampering or corruption is detected.
Purpose: Supply-chain security attestation gate. When to Use: In CI/CD pipelines right before deployment to Kubernetes/OpenShift. Behavior: Read-Only verification. Side Effects: None.
Args: artifact_path_or_url: Remote artifact path (e.g. 'libs-release-local/com/corp/app-1.0.jar') or full URL expected_sha256: 64-character SHA256 digest from CI build or SBOM session_name: Session to query (default: 'default')
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| session_name | No | default | |
| expected_sha256 | Yes | ||
| artifact_path_or_url | Yes |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |