add attestation system to protect binaries (#4012) (#4629)

this allows to prove that binaries were produced by GitHub Actions.
2025-06-08 16:51:19 +02:00
parent 7a7c9c4a6a
commit b3d3fd9b4c
2 changed files with 33 additions and 17 deletions
@@ -14,8 +14,6 @@ jobs:

    - run: make binaries

-    - run: cd binaries; for f in *; do sha256sum $f > $f.sha256sum; done
-
    - uses: actions/upload-artifact@v4
      with:
        name: binaries