From a6527ff6ed3da134850f1cae4b112be653d5472d Mon Sep 17 00:00:00 2001
From: Daniel Micay <danielmicay@gmail.com>
Date: Wed, 11 Jan 2023 03:27:44 -0500
Subject: [PATCH] document switch to OpenSSH signing for Git tags

---
 static/releases.html | 1 +
 1 file changed, 1 insertion(+)

diff --git a/static/releases.html b/static/releases.html
index ea7877e6..93b98821 100644
--- a/static/releases.html
+++ b/static/releases.html
@@ -683,6 +683,7 @@
                         <li>kernel (Pixel 4, Pixel 4 XL, Pixel 4a, Pixel 4a (5G), Pixel 5, Pixel 5a): update base kernel to Android 13 QPR2 Beta 2</li>
                         <li>Vanadium: update Chromium base to 109.0.5414.86</li>
                         <li>Apps: update to <a href="https://github.com/GrapheneOS/Apps/releases/tag/12">version 12</a></li>
+                        <li>switch to signing OS source releases (Git tags) with OpenSSH instead of GPG to fully phase out usage of our GPG key (public key list: <a href="/allowed_signers">allowed_signers</a>, key rotation proof via signify: <a href="/allowed_signers.sig">allowed_signers.sig</a>, key rotation proof via GPG: <a href="/allowed_signers.sig">allowed_signers.asc</a>)</li>
                     </ul>
                 </article>
                 -->