A signed release manifest for vendor binaries - View it on GitHub