search

containers / podman

Podman: A tool for managing OCI containers and pods.
https://podman.io
Apache License 2.0
24.01k stars 2.43k forks source link

Signed release artifacts #24695

Open Jookia opened 4 days ago

Jookia commented 4 days ago

Feature request description

The documentation here says that there are signed release artifacts: https://github.com/containers/podman/blob/main/DOWNLOADS.md#latest-signedofficial

"The latest Podman release version is always available on the GitHub releases page. These are official, signed, sealed, and blessed artifacts intended for general use."

However there are no signed artifacts.

Suggest potential solution

Signing artifacts with PGP keys before uploading.

Have you considered any alternatives?

No response

Additional context

No response

Luap99 commented 4 days ago

The windows and macos installers are singed via the native windows/macos tools AFAICT We do not sign anything else though