[minor] Build signatures (.sig blobs) seem to be missing for the most of the builds #8709

Open
opened 2026-02-16 18:10:38 -05:00 by yindo · 1 comment
Owner

Originally created by @ink-splatters on GitHub (Feb 6, 2026).

Originally assigned to: @thdxr on GitHub.

Question

I have a nix derivations for stuff, including open code, an when it comes to dmg, the most natural way is to mount it and verify .app bundle's notarization.

I see you additionally have (supposedly) minisign signatures for some builds, but not for the other.

My question is: why don't you provide .sig files for CLI builds but do it for .app bundles, where it's generally redundant?

Originally created by @ink-splatters on GitHub (Feb 6, 2026). Originally assigned to: @thdxr on GitHub. ### Question I have a nix derivations for stuff, including open code, an when it comes to dmg, the most natural way is to mount it and verify .app bundle's notarization. I see you additionally have (supposedly) minisign signatures for some builds, but not for the other. My question is: why don't you provide .sig files for CLI builds but do it for .app bundles, where it's generally redundant?
yindo added the nix label 2026-02-16 18:10:38 -05:00
Author
Owner

@github-actions[bot] commented on GitHub (Feb 6, 2026):

This issue might be a duplicate of existing issues. Please check:

  • #8087: Authenticode-signed Windows installer (.exe or .msi) - A similar request for signed/authenticated builds, specifically addressing code signing for Windows executables

Feel free to ignore if this doesn't address your specific case regarding .sig file availability for CLI builds.

@github-actions[bot] commented on GitHub (Feb 6, 2026): This issue might be a duplicate of existing issues. Please check: - #8087: Authenticode-signed Windows installer (.exe or .msi) - A similar request for signed/authenticated builds, specifically addressing code signing for Windows executables Feel free to ignore if this doesn't address your specific case regarding .sig file availability for CLI builds.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: anomalyco/opencode#8709