Publish checksums for Github releases and/or sign them

etesync / etesync-dav

This is a CalDAV and CardDAV adapter for EteSync

https://www.etesync.com

GNU General Public License v3.0

285 stars 45 forks source link

Open thgoebel opened 12 months ago

thgoebel commented 12 months ago

Please publish checksums with the Github releases, e.g. the sha256sums.

This is useful:

as a quick sanity check that the download wasn't corrupted.
to pin the download against a hash when you are configuring systems automatically with Ansible & Co.

Even better, you could PGP-sign them and publish both a linux-amd64-etesync-dav.sha256sum and a linux-amd64-etesync-dav.sig.