bazelbuild / bazelbuild/bazelisk
Add workflow to build release binaries
Open
P2
- Dominant language
- Go
- Stars
- 2.7k
- Forks
- 424
- PR merge metrics
- No merged PRs in 30d
Description
Would be great if there would be an automated workflow which builds and adds the binaries to releases. Ideally with signatures to reduce the risk of supply chain attacks.
Right now, there is no way to verify if the binaries attached to a release are build from the actual source and not from an altered tree.
Contributor guide
Assessment
This issue has not been assessed yet.