Might it be better to merge the two KEYS files into one? The potential problem if we delete a KEYS file is that users won't be able to verify the authenticity of the past artifacts.
On Tue, Feb 21, 2023 at 11:10 PM 吴治国 <[email protected]> wrote: > > > Hi All, > > Currently Ambari's KEYS files exist in two places, ' > https://github.com/apache/ambari/blob/trunk/KEYS' and ' > https://dist.apache.org/repos/dist/release/ambari/KEYS', > Since we have to update two files at the same time every time when we need > to add a new GPG key, which I think it is unnecessary, so I suggest that we > can delete the KEYS file in Ambari trunk branch, > But I don't know if I'm missing something, maybe this KEYS file is being > used elsewhere? > > Best Regards, > Zhiguo Wu
