Paolo Melchiorre
@paulox.fosstodon.org.ap.brid.gy
🐍 #Python developer · 🦄 #Django contributor · 🥑 #FreeSoftware advocate · 🗣 #Conference speaker · 🐧 #Linux user · 👨🔬 #ComputerScience engineer
🦄 #DSF board […]
🌉 bridged from ⁂ https://fosstodon.org/@paulox, follow @ap.brid.gy to interact
🦄 #DSF board […]
🌉 bridged from ⁂ https://fosstodon.org/@paulox, follow @ap.brid.gy to interact
Reposted by Paolo Melchiorre
The #curl release on GitHub is now marked as "immutable" and there's even something they call "release attestation" there now.
Just remember that the curl canonical releases are the signed tarballs uploaded by me. Reproducible, so you can verify them at will to not contain bad things. Signed to […]
Just remember that the curl canonical releases are the signed tarballs uploaded by me. Reproducible, so you can verify them at will to not contain bad things. Signed to […]
Original post on mastodon.social
mastodon.social
November 5, 2025 at 7:23 AM
The #curl release on GitHub is now marked as "immutable" and there's even something they call "release attestation" there now.
Just remember that the curl canonical releases are the signed tarballs uploaded by me. Reproducible, so you can verify them at will to not contain bad things. Signed to […]
Just remember that the curl canonical releases are the signed tarballs uploaded by me. Reproducible, so you can verify them at will to not contain bad things. Signed to […]