potiuk commented on issue #322: URL: https://github.com/apache/tooling-trusted-releases/issues/322#issuecomment-3686360287
> Reproducible builds will usually be GitHub built artifacts signed with the PMC's private key. BTW if the RM is not a PMC Member then their Vote is non-binding. Yeah - when there is GH build, then RM should be stating "reproducibility" check when they did it. I think RM should have the same "template" for voting as any other PMC member, where they can state the voting status and they likely should be at a single "button" press like *send & vote" - maybe next to "send". Maybe sometimes we do not want / have no time to vote, but then the RM can cast their vote after that. I thinlk of this as really purely an optimisation of the workflow for RM. It could also be that RM is redirected to Vote screen after sending the announcement, which would also work and would be a bit more explicit and probably simpler to implement. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
