New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Please sign published artifacts and publish PGP signatures #41

Open

vlsi opened this issue Aug 8, 2019 · 0 comments

vlsi commented Aug 8, 2019

There are lots of native-platform artifacts, however it is hard to verify if the jar in question came from a trusted party.

PGP signatures would help consumers to perform artifact validation.

ov7a mentioned this issue

Gradle has unsigned binaries on macOS gradle/gradle#14905

Open

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment