verify md5 checksum

Author: nicktrn

packages/build/src/extensions/core/ffmpeg.ts

@@ -39,8 +39,13 @@ export function ffmpeg(options: FfmpegOptions = {}): BuildExtension {
           id: "ffmpeg7",
           image: {
             instructions: [
-              "RUN apt-get update && apt-get install -y --no-install-recommends wget xz-utils && apt-get clean && rm -rf /var/lib/apt/lists/*",
-              "RUN wget https://johnvansickle.com/ffmpeg/releases/ffmpeg-release-amd64-static.tar.xz -O ffmpeg.tar.xz && tar xvf ffmpeg.tar.xz -C /usr/bin --strip-components=1 --no-anchored 'ffmpeg' 'ffprobe' && rm ffmpeg.tar.xz",
+              // Install ffmpeg after checksum validation
+              "RUN apt-get update && apt-get install -y --no-install-recommends wget xz-utils && apt-get clean && rm -rf /var/lib/apt/lists/* && " +
+                "wget https://johnvansickle.com/ffmpeg/builds/ffmpeg-git-amd64-static.tar.xz.md5 -O ffmpeg.tar.xz.md5 && " +
+                "wget https://johnvansickle.com/ffmpeg/builds/ffmpeg-git-amd64-static.tar.xz -O ffmpeg.tar.xz && " +
+                "md5sum -c ffmpeg.tar.xz.md5 && " +
+                "tar xvf ffmpeg.tar.xz -C /usr/bin --strip-components=1 --no-anchored 'ffmpeg' 'ffprobe' && " +
+                "rm ffmpeg.tar.xz ffmpeg.tar.xz.md5",
             ],
           },
           deploy: {