[GH-ISSUE #204] Detached PGP signatures #141

Closed
opened 2026-05-05 05:09:13 -06:00 by gitea-mirror · 0 comments
Owner

Originally created by @netblue30 on GitHub (Dec 29, 2015).
Original GitHub issue: https://github.com/netblue30/firejail/issues/204

Moved from SourceForge bug tracker:

I saw that you are providing signed checksums for your released files, which is awesome (not many projects do that)! :-)

Would it be possible to also (or instead?) provide detached signature files for the source tarballs? Debian has a tool "uscan", which checks for new releases. It is also capable to automatically verify the integrity of the downloaded sources, if detached signatures are available [1].

1: https://wiki.debian.org/debian/watch#Cryptographic_signature_verification

Originally created by @netblue30 on GitHub (Dec 29, 2015). Original GitHub issue: https://github.com/netblue30/firejail/issues/204 Moved from SourceForge bug tracker: I saw that you are providing signed checksums for your released files, which is awesome (not many projects do that)! :-) Would it be possible to also (or instead?) provide detached signature files for the source tarballs? Debian has a tool "uscan", which checks for new releases. It is also capable to automatically verify the integrity of the downloaded sources, if detached signatures are available [1]. 1: https://wiki.debian.org/debian/watch#Cryptographic_signature_verification
gitea-mirror 2026-05-05 05:09:13 -06:00
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#141
No description provided.