Hi everyone
I’ve noticed that the current Ninja GitHub releases do not include .asc signature files for verifying the integrity and authenticity of the binaries. Adding these signature files would enhance security and provide users with a reliable way to validate downloads.
Would it be possible to consider including .asc signature files in future releases? I believe this would align well with best practices for open-source distribution and improve trust in the release process.
Take a look at ccache release management:
I’d be happy to help with the implementation or provide more details if needed. Keep me posted.
Best regards,
Flavio Vincenzo Condemi