https://bz.apache.org/bugzilla/show_bug.cgi?id=70200
Bug ID: 70200
Summary: Please upload Key 0x23738DFD7C40DE43 to
https://downloads.apache.org/ant/KEYS
Product: Ant
Version: 1.10.17
Hardware: PC
Status: NEW
Severity: normal
Priority: P2
Component: Core
Assignee: [email protected]
Reporter: [email protected]
Target Milestone: ---
By my reckoning this is used to sign version the maven artefacts
org.apache.ant:ant and org.apache.ant:ant-launcher.
In order to project ourselves and our users from supply chain attack, the
Shibboleth Project requires validatable signatures for all artefacts used
during out build process.
In case it helps, this document describes the motivation
https://shibboleth.atlassian.net/wiki/spaces/DEV/pages/3269918721/Supply+Chain+Defence+for+the+Shibboleth+Java+Products
--
You are receiving this mail because:
You are the assignee for the bug.
