Closed
Description
Issue
We need to sign the assets that are generated by the CI/CD so that it is easy for an end user to download and verify it.
To do
- Add a
CHECKSUM
file created withsha256sum
and is signed with the GPG secret key in the released assets - Create a verification procedure generated automatically and appended to the release notes (
unstable
or the distribution)