Code signing policy

light-view 릴리스 파일의 코드 서명 정책이에요. 저장소 README의 같은 절을 그대로 옮겨서 영어로 적어요.

Release files are not code-signed yet. Every release comes with SHA-256 checksums (SHA256SUMS.txt, also shown on the release page); check a file against them before running it. We plan to apply again to SignPath Foundation's free code signing for open source projects, and this section will name the signing service once releases are signed.

Committers and reviewers: Hyunwook Kim (maintainer)
Approvers: Hyunwook Kim (maintainer)

Every release is built by the GitHub Actions workflow .github/workflows/release.yml from a tagged commit of this repository and published by hand from a draft. Once signing is set up, only those artifacts will be submitted for signing, and each signing request will be approved by hand.

Privacy policy: This program will not transfer any information to other networked systems unless specifically requested by the user or the person installing or operating it. The only such feature is the optional update check, which is off until you turn it on. See PRIVACY.md (also shown by the installer).