[
https://issues.apache.org/jira/browse/RAT-534?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Philipp Ottlinger updated RAT-534:
----------------------------------
Fix Version/s: 1.0.0
> Improve release verification and digest creation
> ------------------------------------------------
>
> Key: RAT-534
> URL: https://issues.apache.org/jira/browse/RAT-534
> Project: Apache RAT
> Issue Type: Task
> Components: build
> Affects Versions: 0.18
> Reporter: Philipp Ottlinger
> Priority: Major
> Fix For: 1.0.0
>
>
> During release vote of 0.18 [~claude] pointed to
> https://apache.org/info/verification.html
> and mentioned that SHA-256 and SHA-512 should be created during the release
> build
> (in <=0.18 the checksums were generated manually before uploading to ASF dist
> area).
> Over at Maven
> https://github.com/apache/maven/blob/master/apache-maven/pom.xml#L376
> https://github.com/nicoulaj/checksum-maven-plugin/tree/master
> is used to automate this part of releases.
> Evaluate and integrate into RAT.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
