Hacker News new | ask | show | jobs
by sterlind 2382 days ago
You can't. Only official builds are signed, and two different people have to submit and approve PRs.
1 comments

That's a big difference from the starting state that Google had, which was that a single person could create a signed production binary from unsubmitted code all by themselves.

(It was very convenient for iterating on one-off fixes in production in an emergency, but you would rightly question how someone gets into that position in the first place. Plus there was no guarantee that the code would ever get submitted, and post-fix code review might cause the code to be subtly broken prior to being committed to the monorepo.)