Releases: Please provide signatures #192

Closed
opened 2025-12-29 00:26:55 +01:00 by adam · 4 comments
Owner

Originally created by @geor-g on GitHub (Jan 29, 2017).

Would it be possible for you, to provide signatures for the releases, so one is able to ensure the pulled in code, for example into Debian, wasn't tampered with along the way? Here is a small guide how to do this.
Thanks!

Originally created by @geor-g on GitHub (Jan 29, 2017). Would it be possible for you, to provide signatures for the releases, so one is able to ensure the pulled in code, for example into Debian, wasn't tampered with along the way? [Here](https://wiki.debian.org/Creating%20signed%20GitHub%20releases) is a small guide how to do this. Thanks!
adam closed this issue 2025-12-29 00:26:55 +01:00
Author
Owner

@lukas2511 commented on GitHub (Jan 29, 2017):

I've signed the latest release and from now on I'll sign all my commits using 3C2F2605E078A1E18F4793909C4DBE6CF438F333, but I can't promise to remember to always upload a signature when I release a new version.

@lukas2511 commented on GitHub (Jan 29, 2017): I've signed the latest release and from now on I'll sign all my commits using `3C2F2605E078A1E18F4793909C4DBE6CF438F333`, but I can't promise to remember to always upload a signature when I release a new version.
Author
Owner

@geor-g commented on GitHub (Jan 29, 2017):

Thanks, that's great! To make it easier to remember this, if case you're using some sort of a script to do the release, maybe it would be good to incorporate this inside there.

@geor-g commented on GitHub (Jan 29, 2017): Thanks, that's great! To make it easier to remember this, if case you're using some sort of a script to do the release, maybe it would be good to incorporate this inside there.
Author
Owner

@lukas2511 commented on GitHub (Jan 29, 2017):

My workflow is to just tag a specific commit and copy the changelog to the release, if you know of any way to completely automate this I'm open for suggestions.

@lukas2511 commented on GitHub (Jan 29, 2017): My workflow is to just tag a specific commit and copy the changelog to the release, if you know of any way to completely automate this I'm open for suggestions.
Author
Owner

@geor-g commented on GitHub (Jan 29, 2017):

Ah yeah, I see. Not sure how this could work with the "automatic" releases provided by GitHub. Maybe something like this could be of any help.

@geor-g commented on GitHub (Jan 29, 2017): Ah yeah, I see. Not sure how this could work with the "automatic" releases provided by GitHub. Maybe something like [this](https://github.com/aktau/github-release) could be of any help.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/dehydrated#192