nick black <dankamong...@gmail.com> writes: > Simon Josefsson left as an exercise for the reader: >> nick black <dankamong...@gmail.com> writes: >> That would be great -- upstreams are using other mechanisms to sign >> their releases today, like Sigsum, Sigstore, gitsign S/MIME etc, and I >> don't think there is any reason why 'uscan' shouldn't support all of >> them. > > i've created #1092818 for this, and am working on it in > https://salsa.debian.org/nickblack/devscripts/-/tree/nickblack/uscan-minisign
\o/ >> This reminds me about the 'apt-get install minisign' package naming >> concern that we tried to flesh out a migration policy for earlier. I >> think I ultimately got lost trying to work out the migration flow for >> how to achieve that... > > i'm not familiar with this. do you have a reference? Sorry I confused it with signify: https://tracker.debian.org/pkg/signify-openbsd See https://lists.debian.org/debian-devel/2024/10/msg00031.html /Simon
signature.asc
Description: PGP signature