On 10/1/21 1:59 PM, Brian Cain wrote:
If there's any trust concerns we can verify the download in the dockerfile 
using the hash file for the tarball and/or the gpg signature.

That's true, I should have thought of that.


r~

Reply via email to