Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Could you sign the plugin or publish a hash #226

Open
salle69 opened this issue Nov 12, 2024 · 3 comments
Open

Could you sign the plugin or publish a hash #226

salle69 opened this issue Nov 12, 2024 · 3 comments

Comments

@salle69
Copy link

salle69 commented Nov 12, 2024

Hi,

Is it possible to sign the plugin so that it is possible to verify its authenticity, or at least publish a hash next to the download link, so that we could verify that it is the untampered file we've downloaded?

/Johan

@Phillipus
Copy link
Member

Well, the great thing about this being a free and open source project is that you can build the binaries from source if you have doubts.

@salle69
Copy link
Author

salle69 commented Nov 12, 2024

@Phillipus, is that a no?

My skillset is such that this might be an unsurmountable obstacle, but I'll see what I can do.

I still think it would be a nice service to provide at least a hash-value next to the download link when you provide pre-compiled versions. Please consider it.

@salle69
Copy link
Author

salle69 commented Nov 12, 2024

I just found that you do this for the tool itself: https://www.archimatetool.com/downloads/archi/5.4.3/Archi-5.4.3-SUMSSHA1

Great idea!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants