[New-bugs-announce] [issue37967] release candidate is not gpg signed (and missing release workflow)?

[mattip]

New submission from mattip <matti.picus at gmail.com>:

Over at [multibuild](https://github.com/pypa/manylinux/pull/333#issuecomment-519802858), they ran into an issue trying to build c-extensions with the 3.8rc3 since it seems it is not gpg signed.

I could not find a HOWTO_RELEASE document to check that the release workflow includes signing the package. One exists in Tools/msi/README.txt.

----------
components: Installation
messages: 350660
nosy: mattip
priority: normal
severity: normal
status: open
title: release candidate is not gpg signed (and missing release workflow)?
type: security
versions: Python 3.8

_______________________________________
Python tracker <report at bugs.python.org>
<https://bugs.python.org/issue37967>
_______________________________________