openSUSE / pesign-obs-integration

GNU General Public License v2.0
7 stars 21 forks source link

Verfiy the signatures before attaching them #43

Closed lcp closed 1 year ago

lcp commented 2 years ago

Sometime the build service may sign the target binaries with the wrong key due to misconfiguration. Verfiy the signature first so that we can detect the error earily.

Ref: bsc#1200108, bsc#1203679

Signed-off-by: Gary Lin glin@suse.com