From 04c83c189d39ef1df59c70431e68a3d6206dd966 Mon Sep 17 00:00:00 2001
From: okturan <okanert@gmail.com>
Date: Sat, 18 Jul 2026 22:37:00 +0200
Subject: [PATCH] fix: verify release checksum from artifact directory

---
 .github/workflows/release.yml | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 02cb5ee..0efa895 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -36,6 +36,17 @@ jobs:
           declared="$(/bin/bash netmon.sh --version)"
           test "$declared" = "MacNetStatsTerm 1.0.0"
 
+      - name: Build and verify release candidate
+        run: |
+          mkdir dist
+          install -m 0755 netmon.sh dist/macnetstats
+          (
+            cd dist
+            shasum -a 256 macnetstats > macnetstats.sha256
+            shasum -a 256 --check macnetstats.sha256
+          )
+          test "$(dist/macnetstats --version)" = "MacNetStatsTerm 1.0.0"
+
   publish:
     name: Publish tagged script
     if: startsWith(github.ref, 'refs/tags/')
@@ -64,8 +75,8 @@ jobs:
           (
             cd dist
             sha256sum macnetstats > macnetstats.sha256
+            sha256sum --check macnetstats.sha256
           )
-          sha256sum --check dist/macnetstats.sha256
           test "$(dist/macnetstats --version)" = "MacNetStatsTerm ${GITHUB_REF_NAME#v}"
 
       - name: Publish GitHub Release