Checksum verification for tflint (#5719)

Author: aslam-quad

tools/cloud-workstations/Dockerfile

@@ -37,8 +37,14 @@ RUN wget https://github.com/koalaman/shellcheck/releases/download/${SHELLCHECK_V
     mv shellcheck-${SHELLCHECK_VER}/shellcheck /usr/local/bin/shellcheck && \
     rm -rf shellcheck-*
 
-# --- Install TFLint ---
-RUN curl -s https://raw.githubusercontent.com/terraform-linters/tflint/master/install_linux.sh | bash
+# --- Install TFLint Securely ---
+RUN TFLINT_ZIP_HASH="c004ec45ade3caf87cd4089feb1d2af9f7df57b13140a36df8a63c0a8cc69f14" && \
+    curl -fsSLo /tmp/tflint_linux_amd64.zip \
+      https://github.com/terraform-linters/tflint/releases/download/${TFLINT_VERSION:-v0.62.1}/tflint_linux_amd64.zip && \
+    echo "${TFLINT_ZIP_HASH}  /tmp/tflint_linux_amd64.zip" | sha256sum -c - && \
+    unzip -o /tmp/tflint_linux_amd64.zip -d /usr/local/bin && \
+    chmod +x /usr/local/bin/tflint && \
+    rm -f /tmp/tflint_linux_amd64.zip
 
 # --- Add HashiCorp Repo and Install Terraform/Packer ---
 RUN curl -fsSL https://apt.releases.hashicorp.com/gpg | gpg --dearmor -o /usr/share/keyrings/hashicorp-archive-keyring.gpg && \

tools/cloud-workstations/workstation-image.yaml

@@ -24,7 +24,7 @@ steps:
   - '--cache-from'
   - '${_LOCATION}-docker.pkg.dev/${PROJECT_ID}/${_REPO}/hpc-toolkit-workstation:latest'
   - '--build-arg'
-  - 'TFLINT_VERSION=v0.58.1'
+  - 'TFLINT_VERSION=v0.62.1'
   - '-f'
   - 'tools/cloud-workstations/Dockerfile'
   - '.'