3proxy/.github/workflows
Vladimir Dubrovin 3bd7cee5b7 Publish and sign a source tarball with each release
Package maintainers, Gentoo among them, build from source and had nothing
signed to verify against: the source archive GitHub generates for a tag is
neither signed nor guaranteed to stay byte-identical.

Add release-tarball.yml. It builds 3proxy-<version>.tar.gz with git archive
from the release tag, signs the tarball and SHA256SUMS-src with the release
key, attests build provenance and uploads all four files to the release.

Also drop the SECURITY.md line about Authenticode signing, left over from the
removal of self-signed Windows binaries.

Closes #1270

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-09-16 14:44:14 +03:00
..
build-ipk.yml Build OpenWrt packages for common router targets 2026-08-24 19:49:13 +03:00
build-rpm-arm64.yml Derive all build timestamps from BUILDDATE 2026-08-22 13:53:29 +03:00
build-rpm-armhf.yml Derive all build timestamps from BUILDDATE 2026-08-22 13:53:29 +03:00
build-rpm-x86-64.yml Derive all build timestamps from BUILDDATE 2026-08-22 13:53:29 +03:00
build-watcom.yml Remove self-signed Authenticode signing from Windows builds 2026-09-16 14:09:49 +03:00
build-win32.yml Remove self-signed Authenticode signing from Windows builds 2026-09-16 14:09:49 +03:00
build-win64.yml Remove self-signed Authenticode signing from Windows builds 2026-09-16 14:09:49 +03:00
build-win-msys2-ucrt64.yml Support static libraries in Makefile.win 2026-07-10 12:10:01 +03:00
build-winarm64.yml Remove self-signed Authenticode signing from Windows builds 2026-09-16 14:09:49 +03:00
c-cpp-cmake.yml apt update before install in workflows 2026-07-27 11:27:55 +03:00
c-cpp-Linux.yml apt update before install in workflows 2026-07-27 11:22:03 +03:00
c-cpp-MacOS.yml Bump actions/checkout from 6 to 7 (#1241) 2026-06-23 11:54:36 +03:00
c-cpp-Windows.yml Fix windows build, re-submit as 0.9.8 2026-08-07 19:16:00 +03:00
docker-test.yml Bump docker/build-push-action from 6 to 7 (#1261) 2026-08-04 11:29:45 +03:00
docker.yml Sign packages, publish checksums, attest before upload, narrow permissions 2026-08-21 11:08:20 +03:00
release-tarball.yml Publish and sign a source tarball with each release 2026-09-16 14:44:14 +03:00
update-version.yml Derive all build timestamps from BUILDDATE 2026-08-22 13:53:29 +03:00