Skip to content

Commit

Permalink
Update SECURITY.md
Browse files Browse the repository at this point in the history
  • Loading branch information
oshai authored Jan 8, 2025
1 parent 3b96a6d commit 96a7da5
Showing 1 changed file with 8 additions and 3 deletions.
11 changes: 8 additions & 3 deletions SECURITY.md
Original file line number Diff line number Diff line change
Expand Up @@ -60,15 +60,20 @@ gpg --verify kotlin-logging-jvm-7.0.3.jar.asc kotlin-logging-jvm-7.0.3.jar
You should see output similar to this if the verification is successful:

```bash
gpg: Signature made ...
gpg: using RSA key 36D4E9618F3ADAB5
gpg: Good signature from "Ohad Shai <[email protected]>" [ultimate]
$ gpg --verify kotlin-logging-jvm-7.0.3.jar.asc kotlin-logging-jvm-7.0.3.jar
gpg: Signature made IST 23:03:28 2024 נוב 30 ש'
gpg: using RSA key 36D4E9618F3ADAB5
gpg: Good signature from "Ohad Shai <[email protected]>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: 47EB 6836 245D 2D40 E89D FB41 36D4 E961 8F3A DAB5
```
**If you see "Good signature"**, it means the file has not been tampered with and is genuinely from the person who signed it.
**If you see "BAD signature", do not trust the file**. It may have been corrupted or tampered with. Delete it and try downloading it again from a trusted source. If the problem persists, contact the mail above.
### 2.0.8-2.0.11
To verify the signature use [this public key](https://keyserver.ubuntu.com/pks/lookup?op=get&search=0x637b8fb6cd0b57ca1e833e897f083a4ab2af5107).
Expand Down

0 comments on commit 96a7da5

Please sign in to comment.