Re: [PHP-DEV] Add security.txt file to php.net

[Ben Ramsey]

On 9/28/23 16:14, Derick Rethans wrote:

On 28 September 2023 20:15:34 BST, Ben Ramsey <ram...@php.net> wrote:

2. I have signed it with my php.net release manager key. Since we
   publish our release manager keys, I'm recommending that a release
   manager for a currently supported version of PHP (at the time) be the
   one to digitally sign this file after making changes.

Please document how to do that.

cheers
Derick

https://github.com/php/php-src/pull/12316

Cheers,
Ben

I've added documentation inline in the security.txt file, and I've also opened a PR on php-src to update the release process documentation:

OpenPGP_signature
Description: OpenPGP digital signature