Update: check integrity of downloaded tarball before extracting it

1 job for !1538 with verify-download in 8 minutes and 7 seconds (queued for 5 seconds)
latest merge request