You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@calcite.apache.org by "Julian Hyde (JIRA)" <ji...@apache.org> on 2017/04/10 20:40:41 UTC
[jira] [Resolved] (CALCITE-1746) Remove KEYS file from git and from
release tar ball
[ https://issues.apache.org/jira/browse/CALCITE-1746?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Julian Hyde resolved CALCITE-1746.
----------------------------------
Resolution: Fixed
Fixed in http://git-wip-us.apache.org/repos/asf/calcite-avatica/commit/01ec8834 (avatica) and http://git-wip-us.apache.org/repos/asf/calcite/commit/35cd2abc (calcite).
> Remove KEYS file from git and from release tar ball
> ---------------------------------------------------
>
> Key: CALCITE-1746
> URL: https://issues.apache.org/jira/browse/CALCITE-1746
> Project: Calcite
> Issue Type: Bug
> Components: avatica, site
> Reporter: Julian Hyde
> Assignee: Julian Hyde
> Fix For: avatica-1.10.0, 1.13.0
>
>
> Remove KEYS file from git repo, and from their release tar balls.
> The definitive KEYS file is the one in subversion, viz https://dist.apache.org/repos/dist/release/calcite. Having a KEYS file in the git repo is redundant, misleading, and potentially dangerous: if a git repo or release tar ball is compromised then its KEYS file may be compromised.
> This applies to both Calcite and Avatica.
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)