#!/usr/bin/env bash

set -euo pipefail

manifest="${1:?usage: verify-sha256-manifest.sh <manifest>}"
if command -v sha256sum >/dev/null; then
  exec sha256sum -c "$manifest"
fi
if command -v shasum >/dev/null; then
  exec shasum -a 256 -c "$manifest"
fi
echo "required SHA-256 verifier not found: need sha256sum or shasum" >&2
exit 2