From d3f085430a1f22b8c8bd78bd8403422aa45d2c55 Mon Sep 17 00:00:00 2001 From: Daniele Nicolodi Date: Sat, 15 Jul 2023 14:26:43 +0200 Subject: [PATCH] DOC: update Security page PyPI does not host detached PGP signatures anymore. --- docs/security.rst | 19 +++++-------------- 1 file changed, 5 insertions(+), 14 deletions(-) diff --git a/docs/security.rst b/docs/security.rst index 938e36493..cb46768b8 100644 --- a/docs/security.rst +++ b/docs/security.rst @@ -9,25 +9,16 @@ Security ******** -Distributors are recommended to fetch release sources via the Git_ tags on our -repository_, or the source distributions on the `meson-python PyPI page`_, both +Distributors are recommended to fetch release sources via the Git tags +on our repository_, or the source distributions on `PyPI`_. Git tags are PGP-signed with one of the following keys: -- |3DCE51D60930EBA47858BA4146F633CBB0EB4BF2|_ *(Filipe Laíns)* -- |52BDC33FD1FBAB569D47FFA923D9E5499A08BDC5|_ *(Ralf Gommers)* +- |3DCE51D60930EBA47858BA4146F633CBB0EB4BF2|_ Filipe Laíns +- |52BDC33FD1FBAB569D47FFA923D9E5499A08BDC5|_ Ralf Gommers -.. admonition:: Fetching artifact signatures from PyPI_ - :class: hint - - To fetch the PGP signatures for artifacts on PyPI_, simply add ``.asc`` to - the artifact URL. - - -.. _Git: https://git-scm.com/ .. _repository: https://github.com/mesonbuild/meson-python -.. _meson-python PyPI page: https://pypi.org/project/meson-python/ -.. _PyPI: https://pypi.org/ +.. _PyPI: https://pypi.org/project/meson-python/ .. |3DCE51D60930EBA47858BA4146F633CBB0EB4BF2| replace:: ``3DCE51D60930EBA47858BA4146F633CBB0EB4BF2`` .. _3DCE51D60930EBA47858BA4146F633CBB0EB4BF2: https://keyserver.ubuntu.com/pks/lookup?op=get&search=0x3dce51d60930eba47858ba4146f633cbb0eb4bf2