assignUser commented on PR #41131: URL: https://github.com/apache/arrow/pull/41131#issuecomment-2148735581
> I was under the impression INFRA would not give out a signing key to use only for signing the source archive, but I may be mistaken. That's also my understanding (nothing would prevent us to sign non-reproducible binaries with the 'just for source'-key). -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
