-
Notifications
You must be signed in to change notification settings - Fork 5k
Open
Description
Expected behavior and actual behavior:
According to the Harbor installation documentation, users should be able to optionally download the corresponding *.asc file to verify that the package is genuine using GPG.
However, in the release page for latest releases, there are no *.asc files available for either the online or offline installers. This makes it impossible to follow the official verification instructions.
Steps to reproduce the problem:
- Navigate to the Harbor releases page: https://github.com/goharbor/harbor/releases/tag/v2.14.0
- Try to locate the corresponding .asc signature file in the release assets (not present).
- Follow the docs to verify the installer bundle with GPG → fails because .asc files are missing.
Versions:
- harbor version: latest
- docker engine version: NA
- docker-compose version: NA
Additional context:
- Documentation reference: https://goharbor.io/docs/2.13.0/install-config/download-installer/
- The docs specifically mention that the .asc file should be available to verify signatures, but it seems to be missing from the latest release assets.
- The .asc signature files were available up until v2.11, but are no longer provided in releases after that.

bupd
Metadata
Metadata
Assignees
Labels
No labels