[
https://issues.apache.org/jira/browse/TEZ-4532?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Ayush Saxena resolved TEZ-4532.
-------------------------------
Fix Version/s: 0.10.4
Resolution: Fixed
> Remove KEYS file from git repo and source distribution
> ------------------------------------------------------
>
> Key: TEZ-4532
> URL: https://issues.apache.org/jira/browse/TEZ-4532
> Project: Apache Tez
> Issue Type: Task
> Reporter: Stamatis Zampetakis
> Assignee: Stamatis Zampetakis
> Priority: Major
> Fix For: 0.10.4
>
> Time Spent: 0.5h
> Remaining Estimate: 0h
>
> As per [release distribution
> instructions:|https://infra.apache.org/release-distribution.html#sigs-and-sums]
> Projects must publish a KEYS file in their distribution directory which
> contains all public keys used to sign artifacts.
> https://dist.apache.org/repos/dist/release/tez/KEYS
> Currently the KEYS file (or a version of it) is also in the [git
> repo|https://github.com/apache/tez/blob/21611246b1dc4cdc61d3c1970c646fb9a6943351/KEYS]
> and is also bundled inside each source distribution.
> The file in the git repo is not serving any purpose since it shouldn't be
> used to verify releases. It adds maintenance overhead (assuming that is kept
> in sync) and possible confusion to the users with respect to which file they
> should use to validate the artifacts.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
