37a603ae14
The old signer was minted for a forge this pipeline stopped publishing to, and a key that opens a host has no business vouching for a release. The new one signs tags and opens nothing.
13 lines
814 B
Text
13 lines
814 B
Text
# Keys authorised to sign RedFlag release tags. The version gate in
|
|
# .gitea/workflows/release.yml verifies the tag against this file and nothing
|
|
# else, so this list is the whole of the release-signing authority.
|
|
#
|
|
# This key signs tags and does nothing else: it is absent from ~/.ssh/config,
|
|
# from every authorized_keys, and from any transport path. A key that opens a
|
|
# host should never also vouch for a release.
|
|
#
|
|
# Rotation: add the incoming key on its own line, cut one release that both
|
|
# keys can verify, then delete the outgoing line. ssh(1) allowed_signers also
|
|
# accepts valid-after= and valid-before= options when a key should lapse on a
|
|
# date rather than on a release.
|
|
casey.tunturi@gmail.com ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMLaHSap8O8lqv1ipvXC8F0QFBqAZF66Ombe/Ep8kX8M RedFlag release signing
|