[Bug report] Release scripts fail to work if you have multiple keys
Open
bug
- Dominant language
- Java
- Stars
- 3.2k
- Forks
- 935
- Avg merge
- 1d 16h
- Merged PRs (30d)
- 298
Description
### Version
main branch
### Describe what's wrong
The release script can grab the wrong key to sign the artefacts
### Error message and/or stacktrace
No error occurs but the release artefacts are signed by the wrong key.
### How to reproduce
Run release script when you have multiple keys under different email addresses.
### Additional context
_No response_
Contributor guide
Research direction
Start by locating the release script and reviewing how it selects a signing key when multiple email addresses are configured. Reproduce the issue with multiple keys, then verify that the selected key matches the intended release identity and that the release artifacts are signed by it.
Written by the indexing model from the issue text.
Assessment
- Domain
- release, security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 30/100