search

bazelbuild / buildtools

A bazel BUILD file formatter and editor
Apache License 2.0
994 stars 410 forks source link

Buildtools release artifacts are unsigned and have no checksum files #1239

Open wade-arista opened 5 months ago

wade-arista commented 5 months ago

For the release binaries in github.com/bazelbuild/bazel, detached signatures are already provided. The release server also has a signature for the source archive, e.g.

https://releases.bazel.build/7.0.2/release/bazel_7.0.2.tar.gz https://releases.bazel.build/7.0.2/release/bazel_7.0.2.tar.gz.sig

It would certainly be nice to have the same for buildtools, if possible.