The sandbox git tag is not checked with gpg
During the Tor Browser build, we are using in gitian/descriptors/linux/gitian-sandbox.yml
a git clone of sandboxed-tor-browser
, but we don't check that the git tag we are using is gpg signed.
During the Tor Browser build, we are using in gitian/descriptors/linux/gitian-sandbox.yml
a git clone of sandboxed-tor-browser
, but we don't check that the git tag we are using is gpg signed.