I download the tarballs locally on my laptop, compute checksums into manifest file and gpg sign the manifest file. Then I upload the manifest and signature asc file to the release.
https://github.com/sommerfelddev/sentrum/blob/master/utils/create-signed-manifest.sh
No way I would give github my pgp key lol.
sommerfeld
npub16r…kz5pl
2024-04-26 18:57:48 UTC
in reply to nevent1q…k64d
Author Public Key
npub16r0tl8a39hhcrapa03559xahsjqj4s0y6t2n5gpdk64v06jtgekqdkz5plSeen on
wss://nos.lolPublished at
2024-04-26 18:57:48 UTCEvent JSON
{
"id": "31dd891c9316626c5bab0165814185dd4d3e476758821c3ee0678ab4e95fb10e",
"pubkey": "d0debf9fb12def81f43d7c69429bb784812ac1e4d2d53a202db6aac7ea4b466c",
"created_at": 1714157868,
"kind": 1,
"tags": [
[
"e",
"209a4d13e9ca19260822f693670a646417fce054f07790bb0d303f9f6d130b32",
"",
"root"
],
[
"e",
"e86f7f51e53b2f5c8c23fb0116f27342cc1fb16298448354366bc9531da3e973"
],
[
"e",
"9107dbbb84d60cb30a68701ac2675b05281deada9f98fa3d1a8c5fa7a9ad5605",
"",
"reply"
],
[
"p",
"d0debf9fb12def81f43d7c69429bb784812ac1e4d2d53a202db6aac7ea4b466c"
],
[
"p",
"726a1e261cc6474674e8285e3951b3bb139be9a773d1acf49dc868db861a1c11"
],
[
"r",
"https://github.com/sommerfelddev/sentrum/blob/master/utils/create-signed-manifest.sh"
]
],
"content": "I download the tarballs locally on my laptop, compute checksums into manifest file and gpg sign the manifest file. Then I upload the manifest and signature asc file to the release.\nhttps://github.com/sommerfelddev/sentrum/blob/master/utils/create-signed-manifest.sh\nNo way I would give github my pgp key lol.",
"sig": "226efe8ac158af8009c71aa1eea59451049feaeea1442fb5fa4ae3d63dbb0f4ba22984972d1e5c001d9e940f26f6902574f486ed0f89301a9209c6a11b339521"
}