Henk,

I believe that these files are on /dist/dev/incubator.  Since that is the
staging area of releases, and part of our release checks include
verifications of signatures, shas, etc, you can exclude that area from your
scans.

John

On Fri, Feb 9, 2018 at 3:23 PM Henk P. Penning <penn...@uu.nl> wrote:

> Hi,
>
>    today two artifacts were released into
>
>      dist/incubator/openwhisk/openwhisk-incubator-rc1/
>
>    ... without any checksum or signature files.
>
>    For details see :
>
>      https://checker.apache.org/projs/incubator.html
>
>    Please fix this soon.
>
>    Regards,
>
>    Henk Penning -- apache.org infrastructure ; dist & mirrors
>
> ------------------------------------------------------------   _
> Henk P. Penning, ICT-beta                 R Uithof MG-403    _/ \_
> Faculty of Science, Utrecht University    T +31 30 253 4106
> <+31%2030%20253%204106> / \_/ \
> Leuvenlaan 4, 3584CE Utrecht, NL
> <https://maps.google.com/?q=Leuvenlaan+4,+3584CE+Utrecht,+NL&entry=gmail&source=g>
>         F +31 30 253 4553 <+31%2030%20253%204553> \_/ \_/
> http://www.staff.science.uu.nl/~penni101/ M penn...@uu.nl     \_/
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
> For additional commands, e-mail: general-h...@incubator.apache.org
>
>

Reply via email to