Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

goreleaser: Release stable source tarball (fixes: #1001). #1002

Merged
merged 1 commit into from Jul 6, 2021

Conversation

andrewsomething
Copy link
Member

@andrewsomething andrewsomething commented Jul 6, 2021

When GitHub generates source tarballs on the fly, there is no guarantee of byte-for-byte equivalence. This can cause issues for distribution packagers and others that wish to verify their downloads.

This can be tested locally using: goreleaser --snapshot The resulting dist/ directory should include a tarball with the project source and the resulting SHA256 file should have the checksum of that file.

@andrewsomething andrewsomething linked an issue Jul 6, 2021 that may be closed by this pull request
Copy link
Member

@scotchneat scotchneat left a comment

lgtm

@andrewsomething andrewsomething merged commit 65b6d08 into main Jul 6, 2021
8 checks passed
@andrewsomething andrewsomething deleted the asb/issues/1001 branch Jul 6, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants