Open duritong opened 5 years ago
Not easily done right now as our automated systems don't yet include a secure why of providing a key for signing.
automated systems don't yet include a secure way
Travis CI has secrets.
I think we use it here: https://github.com/wp-cli/wp-cli-bundle/blob/master/ci/deploy.sh#L24
Has this issue been solved yet?
Would be awesome if you would also sign the RPM packages with your key: https://blog.packagecloud.io/eng/2014/11/24/howto-gpg-sign-verify-rpm-packages-yum-repositories/