external_integration_test: provide needed checksum

In preparation of the flag flip in #8607, use a checksum for
our plain http-downloads.

Change-Id: I834abaccdb4b727f48c3dc2df8cd119839a85992
PiperOrigin-RevId: 258569601
diff --git a/src/test/shell/bazel/external_integration_test.sh b/src/test/shell/bazel/external_integration_test.sh
index 6c89229..bfa4582 100755
--- a/src/test/shell/bazel/external_integration_test.sh
+++ b/src/test/shell/bazel/external_integration_test.sh
@@ -310,7 +310,8 @@
 
   cat >> $(create_workspace_with_default_repos WORKSPACE) <<EOF
 load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_jar")
-http_jar(name = 'endangered', url = 'http://127.0.0.1:$nc_port/lib.jar')
+http_jar(name = 'endangered', url = 'http://127.0.0.1:$nc_port/lib.jar',
+         sha256='$sha256')
 EOF
 
   mkdir -p zoo
@@ -850,6 +851,7 @@
   create_workspace_with_default_repos WORKSPACE
   touch BUILD foo
   zip -r repo.zip *
+  sha256=$(sha256sum repo.zip | head -c 64)
   startup_server $PWD
   # Make the remote repo and local repo slightly different.
   rm foo
@@ -867,6 +869,7 @@
 http_archive(
     name = "repo",
     url = "http://127.0.0.1:$fileserver_port/repo.zip",
+    sha256 = "$sha256",
 )
 EOF
   external_dir=$(bazel info output_base)/external