chore: check integrity of Go in Dockefile (#19130)

sreya · web-flow · commit 2a2851e494e9 · 2025-08-04T08:27:27.000-04:00
diff --git a/dogfood/coder/Dockerfile b/dogfood/coder/Dockerfile
@@ -12,13 +12,15 @@ FROM ubuntu:jammy@sha256:0e5e4a57c2499249aafc3b40fcd541e9a456aab7296681a3994d631
 
 # Install Go manually, so that we can control the version
 ARG GO_VERSION=1.24.4
+ARG GO_CHECKSUM="77e5da33bb72aeaef1ba4418b6fe511bc4d041873cbf82e5aa6318740df98717"
 
 # Boring Go is needed to build FIPS-compliant binaries.
 RUN apt-get update && \
 	apt-get install --yes curl && \
 	curl --silent --show-error --location \
 	"https://go.dev/dl/go${GO_VERSION}.linux-amd64.tar.gz" \
 	-o /usr/local/go.tar.gz && \
+	echo "$GO_CHECKSUM /usr/local/go.tar.gz" | sha256sum -c && \
 	rm -rf /var/lib/apt/lists/*
 
 ENV PATH=$PATH:/usr/local/go/bin
