jscheffl commented on PR #65361: URL: https://github.com/apache/airflow/pull/65361#issuecomment-4263243049
> Better solution would be to embed GPG key in the image. We can probably automate prek to rertrieve GPG Keys and hard-code them in the image. This is not only faster but more secure . Those keys don't change - once published and we are using their IDs, they won't change. What do your mean with "embedding"? That the key is cloned in Airflow repo and COPY is made into docker or that wget is used in general to download? I mean the docker is anyway built dynamically... so what does "persist" mean? Git? -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
