Releases now expose digests for release assets

GitHub now automatically computes and displays SHA256 checksums (digests) for all uploaded release assets. These digests are generated at upload time, immutable, and let you verify that downloaded assets haven’t been altered since publishing. This improves integrity and transparency for every release.

You can view or retrieve asset checksums anywhere you access releases:

• The GitHub Releases UI, next to each asset
• The Releases REST API
• The GraphQL API
• The gh CLI

Join the discussion within GitHub Community.