Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Generate a checksum file for release artifacts and sign it #755

Closed
loicalbertin opened this issue Jul 8, 2021 · 0 comments · Fixed by #756
Closed

Generate a checksum file for release artifacts and sign it #755

loicalbertin opened this issue Jul 8, 2021 · 0 comments · Fixed by #756
Assignees
@loicalbertin

Comments

@loicalbertin
Copy link
Member

As: a user
I want to: ensure that downloaded binaries are those that are actually released by the Ystia team
So that: I can be confident in the downloaded binaries (security, integrity, ...)

AC1: Should generate a checksum file that contains checksum for each release artifact
AC2: Should sign the checksum file with a publicly verifiable gpg key
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@loicalbertin loicalbertin

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Cenerate a checksum file for release artifacts and sign it ystia/yorc
1 participant
@loicalbertin