arrow-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Julian Hyde (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (ARROW-558) Add KEYS files
Date Tue, 14 Feb 2017 15:49:42 GMT

    [ https://issues.apache.org/jira/browse/ARROW-558?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15865998#comment-15865998
] 

Julian Hyde commented on ARROW-558:
-----------------------------------

I don't think it's a good idea to put KEYS in git. If an attacker were to compromise it they
compromise the integrity of all releases. And it's pointless including it in the release tarball.


It has to be in svn, because it has to be on the site, but there should be no other copies.


> Add KEYS files
> --------------
>
>                 Key: ARROW-558
>                 URL: https://issues.apache.org/jira/browse/ARROW-558
>             Project: Apache Arrow
>          Issue Type: Task
>            Reporter: Uwe L. Korn
>            Assignee: Uwe L. Korn
>            Priority: Blocker
>
> Yet the KEYS file is only on SVN but not in git, also I need a PMC to update it on the
SVN, seems like I cannot do this as a committer.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

Mime
View raw message