Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

How to verify that the installation packages attached to the releases have been assembled from the source code #183

Closed
vladimiry opened this issue Jul 6, 2019 · 2 comments

Comments

@vladimiry
Copy link
Owner

  • Attached to the releases installation packages get automatically assembled from the source code with the help of the Continuous Integration systems (CI). So it's a completely reproducible process, ie anyone can fork the project and independently build the installation packages from the source code using the same CI systems.
  • Releases include the publicly available links to the CI build logs.
  • Those logs include the hash sums of the prepared installation packages (hash sums printed at the end of the log).
@vladimiry
Copy link
Owner Author

Referencing with #146.

@vladimiry
Copy link
Owner Author

vladimiry commented Mar 11, 2020

Printing hash-sums into the CI output log originally enabled in v2.0.0-beta.9.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant