ceos/cagebreak
1
0
Fork 0
mirror of https://cagebreak.project-repo.co/cagebreak.git synced 2026-08-23 14:04:19 +02:00
Code Issues Projects Releases Packages Wiki Activity

Move signing key section

Browse source
This commit is contained in:
Cagebreak Signing Key 1 2020-05-31 17:58:26 +02:00
commit f14261d455
1 changed files with 16 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

31
README.md
View file

@ -107,21 +107,6 @@ Release checklist
* [ ] gpg --detach-sign -u keyid release_version.tar.gz
* [ ] Upload archive and signature as build assets
### Signing Key
All releases are signed by at least one of the following collection of
keys.
* E79F6D9E113529F4B1FFE4D5C4F974D70CEC2C5B
* 4739D329C9187A1C2795C20A02ABFDEC3A40545F
Should we at any point retire a key, we will only replace it with keys signed
by at least one of the above collection.
Should we at any point have official mail addresses, their keys will be signed by
a valid key noted above.
The full public keys can be found in `keys/` along with any revocation certificates.
### Reproducible Builds
@ -179,6 +164,22 @@ For every release after 1.0.5, a GPG signature will be provided in `signatures`.
The current signature is called `cagebreak.sig`, whereas all older signatures
will be named after their release version.
#### Signing Key
All releases are signed by at least one of the following collection of
keys.
* E79F6D9E113529F4B1FFE4D5C4F974D70CEC2C5B
* 4739D329C9187A1C2795C20A02ABFDEC3A40545F
Should we at any point retire a key, we will only replace it with keys signed
by at least one of the above collection.
Should we at any point have official mail addresses, their keys will be signed by
a valid key noted above.
The full public keys can be found in `keys/` along with any revocation certificates.
### GCC and -fanalyzer
Cagebreak should compile with any reasonably new gcc or clang. Consider