How should we find the source tarballs?

[corngood]

10.0-rc.2 seems to be the first release published by dotnet-sb-bot, and it no longer has a signature for the github tarballs.

The signature file is still listed under 'assets' in the release json, so we can use that url:

https://github.com/dotnet/dotnet/releases/download/v10.0.100-rc.2.25502.107/dotnet-source-10.0.100-rc.2.25502.107.tar.gz.sig

However, the tarball url no longer seems to be anywhere in the structured json. I guess I'll have to do something like:

https://builds.dotnet.microsoft.com/dotnet/source-build/dotnet-source-$(jq -er .sdkVersion release.json).tar.gz

This feels messier than before.

Originally posted by @corngood in #5367 (comment)

Also, the new tarballs don't have a root directory, which requires special handling for a build process that supports older dotnet versions. It's standard for a source release tarball to have a root directory.

[MichaelSimons]

[Triage] Closing as we will use #5375 to track the underlying cause of the problem.