You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@calcite.apache.org by "Julian Hyde (JIRA)" <ji...@apache.org> on 2017/04/10 17:51:41 UTC

[jira] [Created] (CALCITE-1746) Remove KEYS file from git and from release tar ball

Julian Hyde created CALCITE-1746:
------------------------------------

             Summary: Remove KEYS file from git and from release tar ball
                 Key: CALCITE-1746
                 URL: https://issues.apache.org/jira/browse/CALCITE-1746
             Project: Calcite
          Issue Type: Bug
            Reporter: Julian Hyde
            Assignee: Julian Hyde


Remove KEYS file from git repo, and from their release tar balls.

The definitive KEYS file is the one in subversion, viz https://dist.apache.org/repos/dist/release/calcite. Having a KEYS file in the git repo is redundant, misleading, and potentially dangerous: if a git repo or release tar ball is compromised then its KEYS file may be compromised.

This applies to both Calcite and Avatica.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)