2 Commits

Author	SHA1	Message	Date
Channing Conger	b7fb907d7b	Publish codex-app-server in GitHub releases ... Add codex-app-server to the existing release build, signing, and staging paths so tagged releases upload app-server binaries alongside the other published artifacts.	2026-03-11 14:55:49 -07:00
Shijie Rao	28e7218c0b	feat: linux codesign with sigstore (#7674) ... ### Summary Linux codesigning with sigstore and test run output at https://github.com/openai/codex/actions/runs/19994328162?pr=7662. Sigstore is one of the few ways for codesigning for linux platform. Linux is open sourced and therefore binary/dist validation comes with the build itself instead of a central authority like Windows or Mac. Alternative here is to use GPG which again a public key included with the bundle for validation. Advantage with Sigstore is that we do not have to create a private key for signing but rather with[ keyless signing](https://docs.sigstore.dev/cosign/signing/overview/). This should be sufficient for us at this point and if we want to we can support GPG in the future.	2025-12-08 11:13:50 -08:00