[SOLR-14633] Package manager should support GPG signatures

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: Package Manager
• Assignee: Unassigned
• Reporter: Ishan Chattopadhyaya
• Created: 07/Jul/20 03:20
• Updated: 15/Jul/20 15:21

Description

In order to support first party packages, we should allow package authors to sign a package using GPG. This will allow us to host first party packages by leveraging committers' publicly trusted GPG keys.