On 9/28/23 16:14, Derick Rethans wrote:
> On 28 September 2023 20:15:34 BST, Ben Ramsey <ramsey@php.net> wrote:
>
>> 2. I have signed it with my php.net release manager key. Since we
>> publish our release manager keys, I'm recommending that a release
>> manager for a currently supported version of PHP (at the time) be the
>> one to digitally sign this file after making changes.
>
> Please document how to do that.
>
> cheers
> Derick
I've added documentation inline in the security.txt file, and I've also
opened a PR on php-src to update the release process documentation:
https://github.com/php/php-src/pull/12316
Cheers,
Ben
