Missing Hash and gpg sig file

[deutschem1]

Hello,

since
#196

I cannot find the files for the actual and past releases.

Am I missing smthing ?

regards

[mmerklinger]

There are currently no GPG signature files added to the releases. The Release v2.1.1 had these manually added. Only the installer for Windows has an integrated signature.

[deutschem1]

@mmerklinger thank you for repeating the issue.

Is it possible to get a sig ?

[mmerklinger]

thank you for repeating the issue.

My answer was solely meant as a confirmation that we currently don't add them and you aren't missing anything. As you referred to #196, which refers to #191 I wanted to point out that this was a one time manual add.

Is it possible to get a sig ?

We could add a manual one for the last release if that helps you. We don't do it by default as it has little value and is a manual process. To increase the value we would actually need to verify the artifacts built by GitHub Actions which we currently don't do. If you actually want a verified artifact it's better to build it from source. The commits and tags in the repository are signed.