sbp opened a new issue, #1419: URL: https://github.com/apache/tooling-trusted-releases/issues/1419
We reference signatures to the primary key, but we measured that about 8% of releases so far use at least one subkey to sign, and two projects appear to use only subkeys. We need to review that we are treating subkeys correctly, exposing them throughout the UI appropriately, and that we have no related bugs. This is associated with #1417. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
