Skip to content

Add signature of binaries in the artifacts released #587

Closed
@jpraynaud

Description

@jpraynaud

Issue

We need to sign the assets that are generated by the CI/CD so that it is easy for an end user to download and verify it.

To do

  • Add a CHECKSUM file created with sha256sum and is signed with the GPG secret key in the released assets
  • Create a verification procedure generated automatically and appended to the release notes (unstable or the distribution)

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions