[cross-project-issues-dev] RAP is Contributing Unsigned Content

[Ed Merks <ed.merks@xxxxxxxxx>]

FYI,

I noticed today that RAP is contributing unsigned content:

  https://github.com/eclipse-rap/org.eclipse.rap/issues/50

This slipped through the testing/reporting because in the platform 4.25 
repo, the artifact is PGP signed, but in the RAP repo it is not. The 
reporting process gathers information from all the repos and it finds 
PGP signed one first; that one then looks fine.  The aggregator picks up 
the one without the PGP signature, at least for 
org.apache.commons.commons-io.

I'll try find if I can improve that in the aggregator, pick the artifact 
that is PGP signed, but of course ideally RAP fixes this for RC2 in 
their own repository.

Regards,
Ed