is a new automated ASF dev tool to help projects check for problems in their files.

On 05/04/18 17:08, Andy Seaborne wrote:
To establish the proof chain for signed artifacts in /dist/project/, I
have been asked to try out the new META files.

There are two files


META says who signs what, and is itself signed by the PMC chair.

The signing chain for Jena now shows from route from the ASF key (obtained over https) through the signed files in dist/jena:

and more details about the project are at:

and to browse the checker report on the dist files:


Reply via email to