Uploaded image for project: 'Calcite'
  1. Calcite
  2. CALCITE-1746

Remove KEYS file from git and from release tar ball

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: avatica-1.10.0, 1.13.0
    • Component/s: avatica, site
    • Labels:
      None

      Description

      Remove KEYS file from git repo, and from their release tar balls.

      The definitive KEYS file is the one in subversion, viz https://dist.apache.org/repos/dist/release/calcite. Having a KEYS file in the git repo is redundant, misleading, and potentially dangerous: if a git repo or release tar ball is compromised then its KEYS file may be compromised.

      This applies to both Calcite and Avatica.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                julianhyde Julian Hyde
                Reporter:
                julianhyde Julian Hyde
              • Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: