From d16f500810fa20119f0a5c6d269661ad5bda3411 Mon Sep 17 00:00:00 2001 From: Robin Candau <53110319+Antiz96@users.noreply.github.com> Date: Sat, 13 Apr 2024 10:47:39 +0000 Subject: [PATCH] Add a trust path for users (#138) * Add a trust path for users This file contains the maintainers that are trusted and are allowed to cut and sign git tags and release artifacts for this project. As a user, you can *(and should)* verify that git tags and auto-generated source tarballs on releases (tar.gz archives) for this project are signed by one of the person listed in this file (with the associated GPG key). If a git tag and/or an auto-generated source tarball (tar.gz archive) contained in a release of this project cannot be verified (e.g. it is not signed / it is signed with a GPG key or by a person that is not listed in this file), the associated tag/release/artifact(s) should not be trusted (starting from now). --- MAINTAINERS.md | 12 ++++++++++++ 1 file changed, 12 insertions(+) create mode 100644 MAINTAINERS.md diff --git a/MAINTAINERS.md b/MAINTAINERS.md new file mode 100644 index 0000000..23c13d9 --- /dev/null +++ b/MAINTAINERS.md @@ -0,0 +1,12 @@ +# Maintainers + +This file contains the maintainers that are trusted and are allowed to cut and sign git tags and release artifacts for this project. +As a user, you can *(and should)* verify that git tags and auto-generated source tarballs on releases (tar.gz archives) for this project are signed by one of the person listed below (with the associated GPG key). + +If a git tag or an auto-generated source tarball (tar.gz archive) contained in a release of this project cannot be verified (e.g. it is not signed / it is signed with a GPG key or by a person that is not listed below), the associated tag/release/artifact(s) should not be trusted. + +Current maintainers: + +| Name | Mail | GPG Key (ID / Fingerprint) | GitHub username | +| ---- | ---- | ----------------------------- | --------------- | +| Robin Candau | robincandau@protonmail.com | D33FAA16B937F3B2 / A67CCEEBF9613C17FDE96E4ED33FAA16B937F3B2 | @Antiz96 |