Re: Consider removing autogenerated files from tarballs
| From: | Sebastian Bergmann | Date: | Sat, 30 Mar 2024 07:27:55 +0000 |
| Subject: | Re: Consider removing autogenerated files from tarballs | ||
| References: | 1 2 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-122819@lists.php.net to get a copy of this message | ||
Am 30.03.2024 um 05:17 schrieb Ben Ramsey:
This is also why our release managers sign the tarballs with their own GPG keys, after generating the artifacts. This verifies the release manager was the one who generated the files.But does the release manager generate the files (and the tarball) in a reproducible way?