{"action":"opened","issue":{"url":"https://api.github.com/repos/nodejs/Release/issues/278","repository_url":"https://api.github.com/repos/nodejs/Release","labels_url":"https://api.github.com/repos/nodejs/Release/issues/278/labels{/name}","comments_url":"https://api.github.com/repos/nodejs/Release/issues/278/comments","events_url":"https://api.github.com/repos/nodejs/Release/issues/278/events","html_url":"https://github.com/nodejs/Release/issues/278","id":270404466,"number":278,"title":"Policy: don't add a new release signing key shortly before a release","user":{"login":"ofrobots","id":79017,"avatar_url":"https://avatars1.githubusercontent.com/u/79017?v=4","gravatar_id":"","url":"https://api.github.com/users/ofrobots","html_url":"https://github.com/ofrobots","followers_url":"https://api.github.com/users/ofrobots/followers","following_url":"https://api.github.com/users/ofrobots/following{/other_user}","gists_url":"https://api.github.com/users/ofrobots/gists{/gist_id}","starred_url":"https://api.github.com/users/ofrobots/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ofrobots/subscriptions","organizations_url":"https://api.github.com/users/ofrobots/orgs","repos_url":"https://api.github.com/users/ofrobots/repos","events_url":"https://api.github.com/users/ofrobots/events{/privacy}","received_events_url":"https://api.github.com/users/ofrobots/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2017-11-01T18:26:01Z","updated_at":"2017-11-01T18:26:01Z","closed_at":null,"author_association":"NONE","body":"With `8.9.0`, we added a new releaser and a [new release signing key](https://github.com/nodejs/node/pull/16620) shortly before the release. (Thanks @gibfahn for all your hard work in getting the release out of the door :heart:).\r\n\r\nI would like to propose we add new release signing keys well in advance of them getting used. Otherwise, any new binaries published with the new key seem like rogue binaries as downstream users/organizations haven't had a time to react to the addition of the new release key."}}
{"actor":{"display_login":"ofrobots"}}