New answers tagged


I asked about how the authenticity of releases on GitHub and GitLab can be ensured. To answer your question: people could sign releases with GPG and publish hashsums of the built release binaries so others can confirm them to be valid or invalid. They could do so by cloning the repository and building the release from the source code themselves and check if ...

Top 50 recent answers are included