Comment by immibis

Digital signing wouldn't defend you from a compromised build server.