... | ... | @@ -1685,6 +1685,8 @@ like a good compromise. |
|
|
dependencies, delegates sharing signatures to git, but
|
|
|
cryptographically signs them so should be resilient against a
|
|
|
server compromise
|
|
|
* [arch linux upstream tag verifications](https://vulns.xyz/2022/05/auth-tarball-from-git/)
|
|
|
* [Linux kernel OpenPGP keys distribution repository](https://git.kernel.org/pub/scm/docs/kernel/pgpkeys.git/tree/README.rst)
|
|
|
|
|
|
## Migration from Trac
|
|
|
|
... | ... | |