Make digest verification optional

Signed-off-by: Alex Ellis (OpenFaaS Ltd) <[email protected]>

cmd/update.go

@@ -31,8 +31,12 @@ func MakeUpdate() *cobra.Command {
 		SilenceErrors: false,
 	}
 
+	command.Flags().Bool("verify", true, "Verify the checksum of the downloaded binary")
+
 	command.RunE = func(cmd *cobra.Command, args []string) error {
 
+		verifyDigest, _ := cmd.Flags().GetBool("verify")
+
 		name := "arkade"
 		toolList := get.MakeTools()
 		var tool *get.Tool
@@ -91,17 +95,19 @@ func MakeUpdate() *cobra.Command {
 			return err
 		}
 
-		digest, err := downloadDigest(downloadUrl + ".sha256")
-		if err != nil {
-			return err
-		}
+		if verifyDigest {
+			digest, err := downloadDigest(downloadUrl + ".sha256")
+			if err != nil {
+				return err
+			}
 
-		match, err := compareSHA(digest, newBinary)
-		if err != nil {
-			return fmt.Errorf("SHA256 checksum failed for %s, error: %w", newBinary, err)
-		}
-		if !match {
-			return fmt.Errorf("SHA256 checksum failed for %s", newBinary)
+			match, err := compareSHA(digest, newBinary)
+			if err != nil {
+				return fmt.Errorf("SHA256 checksum failed for %s, error: %w", newBinary, err)
+			}
+			if !match {
+				return fmt.Errorf("SHA256 checksum failed for %s", newBinary)
+			}
 		}
 
 		if err := replaceExec(executable, newBinary); err != nil {