mirror of
https://github.com/spring-projects/spring-framework.git
synced 2026-05-02 20:09:31 +01:00
46bd6add15
This commit adds a link to the now published information on spring.io about the GPG key used to sign the Spring artifacts published on Maven Central. Closes gh-23434
420 B
420 B
Security Policy
JAR signing
Spring Framework JARs released on Maven Central are signed. You'll find more information about the key here: https://spring.io/GPG-KEY-spring.txt
Supported Versions
Please see the Spring Framework Versions wiki page.
Reporting a Vulnerability
Please see https://spring.io/security-policy.