46bd6add15
This commit adds a link to the now published information on spring.io about the GPG key used to sign the Spring artifacts published on Maven Central. Closes gh-23434
17 lines
420 B
Markdown
17 lines
420 B
Markdown
# Security Policy
|
|
|
|
## JAR signing
|
|
|
|
Spring Framework JARs released on Maven Central are signed.
|
|
You'll find more information about the key here: https://spring.io/GPG-KEY-spring.txt
|
|
|
|
## Supported Versions
|
|
|
|
Please see the
|
|
[Spring Framework Versions](https://github.com/spring-projects/spring-framework/wiki/Spring-Framework-Versions)
|
|
wiki page.
|
|
|
|
## Reporting a Vulnerability
|
|
|
|
Please see https://spring.io/security-policy.
|