churchyard / rpms / python3

Forked from rpms/python3 2 years ago
Clone

102b2b Verify upstream sources with GPG

Authored and Committed by churchyard 6 months ago
    Verify upstream sources with GPG
    
    This is now a recommended thing to do:
    https://docs.fedoraproject.org/en-US/packaging-guidelines/#_source_file_verification
    
    Regardless if it adds actual security, it should prevent problems like this one:
    https://mail.python.org/archives/list/python-dev@python.org/message/OYNQS2BZYABXACBRHBHV4RCEPQU5R6EP/
    
        
file added
+11542
file modified
+5 -1
file modified
+1 -0