Clarifications #334
Open
Clarifications #334
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
tisonkun
reviewed
Jan 8, 2024
| All supplied packages MUST be cryptographically signed with a detached signature. | ||
| It MUST be signed by either the Release Manager or the automated release | ||
| All supplied packages MUST be cryptographically signed with an ASCII-armored detached signature. | ||
| They MUST be signed by either the Release Manager or the automated release |
There was a problem hiding this comment.
Can we mention that a RM signature should use <username>@apache.org as its mail address?
Also, how do we view/recomment a multiple addresses signature, like:
apache-pekko-grpc-1.0.2-incubating-src-20231229.tgz
gpg: Signature made 六 12/30 00:39:42 2023 CST
gpg: using RSA key 6BA4DA8B1C88A49428A29C3D0C69C1EF41181E13
gpg: Good signature from "PJ Fanning (GitHub noreply address) <[email protected]>" [unknown]
gpg: aka "PJ Fanning <[email protected]>" [unknown]
gpg: aka "PJ Fanning (http://www.apache.org/) <[email protected]>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: 6BA4 DA8B 1C88 A494 28A2 9C3D 0C69 C1EF 4118 1E13
@wu-sheng once found that such a signature may not display fully on some signature viewers (that display only the first mail address).
|
@rvs Bump |
raboof
reviewed
Sep 13, 2024
Apply comment
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
No description provided.