8000 Please sign release tarballs and/or release tags · Issue #345 · caarlos0/env · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content
Please sign release tarballs and/or release tags #345
New issue
New issue
Open
Open
Please sign release tarballs and/or release tags#345
@ottok

Description

@ottok
ottok
opened on Nov 28, 2024

Hi!

While working on the Debian packaging for this Go program, I noticed that there are no *.asc signatures published at https://github.com/caarlos0/env/releases nor does the git tags in this project have signatures.

For better supply chain security, please consider signing both tags and release artifacts. Thanks!

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions
      0