public inbox for gentoo-dev@lists.gentoo.org
 help / color / mirror / Atom feed
Search results ordered by [date|relevance]  view[summary|nested|Atom feed]
thread overview below | download: 
* [gentoo-dev] rejecting unsigned commits
@ 2011-03-24 21:59 99% Mike Frysinger
  0 siblings, 0 replies; 1+ results
From: Mike Frysinger @ 2011-03-24 21:59 UTC (permalink / raw
  To: gentoo-dev

is there any reason we should allow people to commit unsigned
Manifest's anymore ?  generating/posting/enabling a gpg key is
ridiculously easy and there's really no excuse for a dev to not have
done this already.

when i look at the tree, the signed stats are stupid low:
$ find *-* -maxdepth 2 -name Manifest | wc -l
14438
$ find *-* -maxdepth 2 -name Manifest -exec grep -l 'BEGIN PGP
SIGNATURE' {} + | wc -l
6032

this is especially important for the people doing arch keywording
since they make a ton of commits.  i'm looking at you armin76.
-mike



^ permalink raw reply	[relevance 99%]

Results 1-1 of 1 | reverse | options above
-- pct% links below jump to the message on this page, permalinks otherwise --
2011-03-24 21:59 99% [gentoo-dev] rejecting unsigned commits Mike Frysinger

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox