# Verified 2026-09-17 against the real repo: scaleway/scaleway-cli does not # publish GitHub build-provenance attestations (the attestations API 404s # for a fresh release asset) — tier 4, same-origin checksum only, not tier # 2. Motivation: Manjaro's `extra` scaleway-cli lags upstream by weeks; # this tracks upstream releases directly instead. # # Releases ship one combined `SHA256SUMS` file (one line per platform # asset) rather than a per-asset checksum file like uv's — verifier # matches the line by filename. [package.scaleway-cli] repo = "scaleway/scaleway-cli" asset_pattern = "scaleway-cli_{version}_linux_amd64" [package.scaleway-cli.verification] method = "same-origin-sha256" checksum_asset_pattern = "SHA256SUMS"