I don’t seem to recall the answer to this one, and I couldn’t find it in the search — is there a difference between packages that are attached to a release on the github page and the one that gets pushed to osquery.io?

The signature might be different, just because of CI and them being signed in two different occasions

perfect, thanks, that’s what I thought as well

Histprically the stable promotion was a rebuild, which caused skew between things. But with the work in https://github.com/osquery/osquery-codesign/pull/43 there is now a single build to GH, and the things are copied from there to pkg.