5 Commits (d522d8006b891eccd7901faf391f9c041ddf8e38)

Author	SHA1	Message	Date
Carl Dong	d522d8006b	guix: Attest to inputs in inputs.SHA256SUMS ... At build/codesigning-time, hash build inputs and output the digest to ${OUTDIR}/inputs.SHA256SUMS, which gets included in the final SHA256SUMS constructed by guix-attest. Example final SHA256SUMS: ee832d2a35b7701bff581dea05a536118b118e3ad0a587a2855b6ee8cd6fba20 inputs/bitcoin-78199266af7b.tar.gz ca765e70a0c12866dd63c0be228b675278a26329e5f8f5b5c52fd09200fedf21 bitcoin-78199266af7b-powerpc64le-linux-gnu-debug.tar.gz dae95327d7f2c324e2728c4b73627be6cb2c0d2f2e5bea940d1d5e6463939327 bitcoin-78199266af7b-powerpc64le-linux-gnu.tar.gz	4 years ago
Carl Dong	c83c4fa5b7	guix-attest: Allow skipping GPG signing with NO_SIGN	4 years ago
Carl Dong	0e1c2e448c	guix-attest: Use ascii-armor signatures	4 years ago
Carl Dong	b5fd89c4c8	guix-attest: Only use cross-platform flags for find+xargs	4 years ago
Carl Dong	30daf76a97	guix: Add guix-attest script	4 years ago