On 19/04/2023 12:00, Thomas Klausner wrote:
What exactly do you want to do?
Sign a locally created tarball to match the tarball one could download from a github release. Github releases offer both .zip and .gzip archives. I don't want to download the tarball from github and sign that as it's not from the repository.
Hope this makes sense! Roy