Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Publish checksums for .tar.gz archives #2950

Closed
johananl opened this issue Dec 6, 2023 · 4 comments · Fixed by #3201
Closed

Publish checksums for .tar.gz archives #2950

johananl opened this issue Dec 6, 2023 · 4 comments · Fixed by #3201
Labels
kind/feature
Milestone
0.38.0

Comments

@johananl
Copy link
Contributor

johananl commented Dec 6, 2023

Motivation

I couldn't find any checksums along with the archives published at https://download.falco.org/?prefix=packages/bin/x86_64/. I think it's important to let users verify the integrity of the binaries they download.

Feature

I suggest to update the Falco release process to compute and publish checkums for all .tar.gz archives (as far as I can tell, the DEB and RPM binaries already have .asc files which are cryptographic signatures).

Alternatives

None

Additional context

None
@Andreagit97 Andreagit97 added this to the 0.38.0 milestone Dec 11, 2023
@Andreagit97
Copy link
Member

thank you for reporting this, it makes a lot of sense!

@poiana
Copy link

poiana commented Mar 10, 2024

Issues go stale after 90d of inactivity.

Mark the issue as fresh with /remove-lifecycle stale.

Stale issues rot after an additional 30d of inactivity and eventually close.

If this issue is safe to close now please do so with /close.

Provide feedback via https://github.com/falcosecurity/community.

/lifecycle stale

@Andreagit97
Copy link
Member

/remove-lifecycle stale

@LucaGuerra LucaGuerra mentioned this issue May 16, 2024
Merged
@johananl
Copy link
Contributor Author

Thanks for handling this!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
kind/feature
Projects
None yet
Milestone
0.38.0
Development

Successfully merging a pull request may close this issue.

new(ci): sign .tar.gz packages LucaGuerra/falco
3 participants
@johananl @poiana @Andreagit97