Hi, as I prepared the release I followed the available ASF-guidelines, but https://repository.apache.org/content/repositories/orgapachecreadur-1005/org/apache/rat/apache-rat-api/ shows only SHA1 and MD5.
Can I manually sign/created those hashes and upload them?! How do I do this? How is does the project need to be configured to have proper hashes during the next release? How do I add my GPG-key to the KEYS file? Other ASF projects have a KEYS file in their base repo, which RAT doesn't have. Thanks in advance, Phil
