generate a SHA256 checksum of the release tarball in addition to MD5

Related to #1955.

diff --git a/ci/deploy.py b/ci/deploy.py
index 99d49dcd468f18b8cc104ff235561fc39d591e66..6c23ce62eda36d311c2ee71a99f537e471c90f2c 100644 (file)
--- a/ci/deploy.py
+++ b/ci/deploy.py
@@ -76,6 +76,13 @@ def checksum(path: str) -> Generator[str, None, None]:
       f.write(f'{hashlib.md5(data.read()).hexdigest()}  {path}\n')
   yield check
 
+  log.info(f'SHA256 summing {path}')
+  check = f'{path}.sha256'
+  with open(check, 'wt') as f:
+    with open(path, 'rb') as data:
+      f.write(f'{hashlib.sha256(data.read()).hexdigest()}  {path}\n')
+  yield check
+
 def main(args: List[str]) -> int:
 
   # setup logging to print to stderr