.. thought I was endorsing the Apache release process we have been working 
on in accordance with Apache policies... did you read into that statement 
otherwise?




From:   Bertrand Delacretaz <[email protected]>
To:     [email protected]
Date:   07/12/2018 09:32 AM
Subject:        Re: should we enable signed commits on our github repos?



On Tue, Jul 10, 2018 at 10:02 PM Matt Rutkowski <[email protected]> 
wrote:
> ...signed, tagged releases are just fine by me...

Note that releases which cannot be traced to an Incubator PMC vote are
*not* Apache Releases, whoever does them does so under their own
responsibility.

OTOH, Apache Releases are acts of the Foundation, which is how the ASF
provides legal protection.

http://www.apache.org/dev/release-publishing.html 
and
http://www.apache.org/legal/release-policy.html 
provide more details.

-Bertrand





Reply via email to