Authenticate tarball through signed tag in Git repo (with reproducible builds) | Heykuki News