A future version of this be able to run against a local checkout to ensure
that someone doesn't accidentally waste time by missing one small detail. I
think that's a separate issue, but I find myself building the dist locally
nervously scanning the files so that I don't fail later.
Useful for release managers to test the release before publishing. @adriancole in https://github.com/openzipkin-contrib/apache-release-verification/pull/22#issuecomment-487852641: