This is an automated email from the ASF dual-hosted git repository.
wave pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tooling-docs.git
The following commit(s) were added to refs/heads/main by this push:
new e7e0944 Adjusted KEYS requirements
e7e0944 is described below
commit e7e09442df8f2efa6e89e7974910dcf7a102ea4f
Author: Dave Fisher <dave2w...@comcast.net>
AuthorDate: Sun Jan 26 13:15:01 2025 -0800
Adjusted KEYS requirements
---
apache-trusted-release/requirements.md | 14 ++++++++------
1 file changed, 8 insertions(+), 6 deletions(-)
diff --git a/apache-trusted-release/requirements.md
b/apache-trusted-release/requirements.md
index dfdfaec..e89ac5a 100644
--- a/apache-trusted-release/requirements.md
+++ b/apache-trusted-release/requirements.md
@@ -28,7 +28,7 @@ While reading consider these Notes:
- Every project has a management interface.
- Current manual release practice is viewable.
- Automated release status.
- - Key management.
+ - **KEYS** file management including revoking keys.
- Manual triggers.
- Tracking performance.
- Platform includes a RESTful API.
@@ -46,8 +46,7 @@ While reading consider these Notes:
- Include dependency and license compliance.
- Provide clear attribution and information about Release Votes.
- Certificate and Credential Management
- - KEYs files are hard to manage.
- - Handle signing keys needed for automation.
+ - Manage the signing keys needed for automation.
- Download Page including available SBOM and verification instructions.
- Announcement Email.
@@ -66,7 +65,10 @@ While reading consider these Notes:
- Legal Policy. (to the extent possible)
- Distribution Policy is built into the **ATR**
- Signing Certificates.
- - Optional Digital Signatures - Windows / macOS.
+ - Optional Digital Signatures:
+ - Windows.
+ - macOS.
+ - (others TBD).
- Voting:
- Perform the Release Vote on the project dev list.
- PMC votes through ATR, but emails are sent for each.
@@ -83,12 +85,12 @@ While reading consider these Notes:
- Node
- DockerHub
- Artifactory
- - (A prioritized list)
+ - (others TDB)
- Candidates:
- Some release candidates may be distributed to test repositories.
- Apache staging repository
- Test PyPi
- - (others?)
+ - (others TDB)
- Developers may want to test those artifacts while voting.
- Release Summary Email.
- Include instructions about any optional repositories not automated.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tooling.apache.org
For additional commands, e-mail: dev-h...@tooling.apache.org
