Are there checksum files for rubygems to download?

[johanneskastl]

Dear all,

I know that I can find a gem's sha256 checksum on the rubygem page for that rubygem. But is there also a downloadable file for the checksum? Or a file with a GPG signature or something similar?

It might be that I just missed this as "rubygems sha256 download" are bad search terms it seems...

Kind Regards,
Johannes

[segiddins]

It's included in the gem version API responses, and is already automatically verified by Bundler

[johanneskastl]

Thanks for the reply. So that means that there are no files to download directly?

From a linux distribution packager's perspective having a "consistent" path to the actual gem file and one for the according checksum would be really handy.

Do you have a pointer to the API documentation for me? Maybe with some curl+jq magic I can come up with a quick hack...

[segiddins]

https://guides.rubygems.org/rubygems-org-api/#gem-version-methods