[RockstarSprain]

A bit concerned about this warning (1):

"IMPORTANT: These binaries are provided by anyone who are willing to build and submit them, they are NOT official. Because these binaries generally not reproducible, authenticity cannot be guaranteed. For your consideration, each download page lists the GitHub user that submitted those binaries."

Given one does not compile their own version, wouldn't this make the privacy trade-off vis-à-vis generic Chromium unacceptable?

(1) https://ungoogled-software.github.io/ungoogled-chromium-bina...

[1kaizen]

Yea. Why cant github actions build these artifacts?

[Ahrotahn]

It does! That warning is for a different repo that allows community contribution:

https://github.com/ungoogled-software/ungoogled-chromium-bin...

[winkelmann]

GitHub now offers "artifact attestation"[1], which would be ideal for this use case. It records what build process binaries originated from, so they can still be published elsewhere while remaining verifiable.

[1] https://github.blog/changelog/2024-06-25-artifact-attestatio...

[vodkapump]

It needs way too much space to build with github actions

[keepamovin]

Because of the code signing for macOS

[karlgkk]

> Given one does not compile their own version

skill issue