artools only embeds internal LiveOS md5 files; nothing verifies the ISO itself. Emit <iso>.sha256 alongside the artifact in both CI and the podman build script so releases ship a verifiable checksum.
artools only embeds internal LiveOS md5 files; nothing verifies the ISO itself. Emit <iso>.sha256 alongside the artifact in both CI and the podman build script so releases ship a verifiable checksum.