apache / apache/gravitino

[Bug report] Release scripts fail to work if you have multiple keys

Open
#6,831 0 comments 0 reactions 0 assignees View on GitHub
bug
Dominant language
Java
Stars
3.2k
Forks
935
Avg merge
1d 16h
Merged PRs (30d)
298

Description

### Version

main branch

### Describe what's wrong

The release script can grab the wrong key to sign the artefacts

### Error message and/or stacktrace

No error occurs but the release artefacts are signed by the wrong key.

### How to reproduce

Run release script when you have multiple keys under different email addresses.

### Additional context

_No response_

Contributor guide

Open the contributing guide

Research direction

Start by locating the release script and reviewing how it selects a signing key when multiple email addresses are configured. Reproduce the issue with multiple keys, then verify that the selected key matches the intended release identity and that the release artifacts are signed by it.

Written by the indexing model from the issue text.

Assessment

Domain
release, security
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.