Using an integrity hash

Contact Center
1

My company is integrating zoom chat into an online banking application for a client.

We got the standard script:

<script
  data-chat-entry-id="your_entry_ID"
  data-apikey="your_apikey"
  data-el="#chat"
  src="https://us01ccistatic.zoom.us/us01cci/web-sdk/zcc-sdk.js"/>

And were told by the OLB provider that we needed to include an SRI Integrity Token to be in compliance with their security standards. We provided an Integrity hash, but quickly the chat stopped working because the hash was rendered invalid when the zcc-sdk.js updated. This same issue happened twice, which caused a lot of stress on the client.

My questions:

  1. Is there some integrity check that can be done using Zoom’s resources that might satisfy the OLB provider?
  2. Failing that, is there some way to bundle the .js resource so that we can include it with our build and still integrate w/ Zoom?

Additional insight or security details would be very helpful.