Jeffrey Lau

> @maxirmx thanks for the feedback. I also was surprised that `USE_STATIC_DEPENDENCIES` affects non-cacheable dependencies. > > https://github.com/rnpgp/rnp/blob/master/ci/lib/install_functions.inc.sh#L276-L280 > > In my opinion `USE_STATIC_DEPENDENCIES` should not affect non-cacheable dependencies, how...

In light of the concerns about secret key stored in servers not in our control, another workflow I see is, instead of automatic signing, the developer signs the package locally...

Hi @remicollet , thanks for lending a hand! The rnp.spec you provided looks much cleaner than the one I have on hand, so I'm very glad. I can see that...