Vladimir Dubrovin ad6e151b7c Publish and sign a source tarball with each release ... Package maintainers, Gentoo among them, build from source and had nothing signed to verify against: the source archive GitHub generates for a tag is neither signed nor guaranteed to stay byte-identical. Add release-tarball.yml. It builds 3proxy-<version>.tar.gz with git archive from the release tag, signs the tarball and SHA256SUMS-src with the release key, attests build provenance and uploads all four files to the release. Also drop the SECURITY.md line about Authenticode signing, left over from the removal of self-signed Windows binaries. Closes #1270 Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>		2026-09-16 14:44:14 +03:00
..
workflows	Publish and sign a source tarball with each release	2026-09-16 14:44:14 +03:00
dependabot.yml	Add more docker platforms	2026-06-01 20:16:19 +03:00