zowe / zowe.github.io

Zowe.org website development
https://zowe.org
Creative Commons Attribution 4.0 International
13 stars 34 forks source link

All binary downloads should include instructions on how to verify the hash with gpg #830

Open MarkAckert opened 1 year ago

MarkAckert commented 1 year ago

We currently digitally sign all zowe.org artifacts with a GPG key, but only the convenience package download path provides users with the instructions on how to verify their package using the GPG key. We should clearly document how to do this for every package, either at the final download page like the convenience pax, or as a new topic in docs.zowe.org.