hansva commented on issue #8608: URL: https://github.com/apache/hop/issues/8608#issuecomment-5854478857
Thanks you for the reply @marc0der, currently releases are done by the release manager which is an individual and it is not always the same individual. They sign the release with a personal key. This then gets vetted. Pushing to sdkman does not work in this process. I know the infra team is working on a central trusted building system I will reach out to them to see how this could become part of that. As far as I understood all releases will be build using keys of the foundation, if this means that you can have a single key from the foundation that can be used to add all of its projects that sounds like a win-win. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
