apache / apache/tooling-releases-client
Add commands to sign and verify artifacts
Open
enhancement
- Dominant language
- Python
- Stars
- 5
- Forks
- 4
- Avg merge
- 6h 22m
- Merged PRs (30d)
- 3
Description
We should make it easy to sign and verify artifacts, wrapping gpg.
Contributor guide
Research direction
The issue names no files, tests, or entry points. Begin by mapping the Python project's command interface and how it handles artifacts, then determine the supported signing and verification behavior around gpg. Done means the project provides commands that sign and verify artifacts through gpg.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- cli, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100