Authenticate tarball through signed tag in Git repo (with reproducible builds)github.com/kpcyrd1 pointpabs34 years ago