Summary

Was experimenting with the uv installer for CI/CD:

curl -LsSf https://astral.sh/uv/install.sh | env UV_UNMANAGED_INSTALL="$HOME/bin" sh
downloading uv 0.6.16 x86_64-unknown-linux-gnu
no checksums to verify
installing to /tmp/bin
  uv
  uvx
everything's installed!

Noticed no checksums to verify - I looked at the installer script and it looks like it has everything in there to verify the checksums, it's just missing the checksum values. The checksums are also on the GH releases page, so it looks like they just need to be injected into the install script on release or downloaded separately from the GH release. Would be a nice touch for added security.

Example

No response