RPM package signing - Githubissues

maxmind / geoipupdate

GeoIP update client code

Apache License 2.0

731 stars 142 forks source link

RPM package signing #180

Open sanjeethmallesh opened 2 years ago

sanjeethmallesh commented 2 years ago

@oschwald it looks like rpms/packages are not signed using GPG keys. Do we have any plans to sign packages and make pub keys available to validate RPM using keys?

oschwald commented 2 years ago

Although it looks like goreleaser now supports the signing of packages, there are no immediate plans to sign the packages. We may consider this as a future enhancement.