• Member for 3 years, 2 months
  • Last seen more than a month ago
Is GitHub "releases" section safe from malicious code? To be specific, does the binary match the code in a restrictive way?
-2 votes

I asked about how the authenticity of releases on GitHub and GitLab can be ensured. To answer your question: people could sign releases with GPG and publish hashsums of the built release binaries so ...

View answer