When --update-package is executed, output the hash of the parameters

[dominique-pfister]

This feature would nicely integrate with https://github.com/adobe/helix-param-checker

That runtime action checks the consistency of package secrets using a SHA256. In order to not have that action's monitor report a failure with the expected hash first before being able to update that hash, it would be nice if the builder would output the expected hash when running --update-package.

[trieloff]

Do we need the same feature in helix-deploy or can it wait and we only implement it there?

[dominique-pfister]

I think it can wait: this feature would be nice to have when executing

$ wsk-builder --no-build --no-hints --update-package

when some secrets in the package params file changed.

[tripodsan]

I think we can add it now, and then port it to helix-deploy once finished.