[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: ask github to encourage signed git tags



On Thu, Apr 14, 2016 at 8:23 AM, Tiago Ilieve wrote:

> Actually the possibility of attaching a tarball signature exists for a
> while[1]. Found it less than five minutes after sending this message.
> :-)
>
> [1]: https://wiki.debian.org/Creating%20signed%20GitHub%20releases

This relies on github either storing the tarballs forever (rather than
regenerating from the git repo) or never changing their gzip and git
archive implementations.

-- 
bye,
pabs

https://wiki.debian.org/PaulWise


Reply to: