I’d like to request Verified Publisher status on behalf of the GIMP project.
For the past few weeks, we (Snapcrafters) have been working with two upstream GIMP developers on how they can take ownership of the snap in the upstream project.
Your role within that institution, foundation or company Release Engineer
I work for Canonical as VP Engineering, and serve as one of the Snapcrafters admins. I’m requesting this verified status on behalf of @brunvonlope and @jehan on Github, one of whom will comment here to +1.
The group email address that should be tied to the Verified Account::
Please use the address associated with the account: snap@gimp.org
We made an account in here and we were asked to comment to be verified. I’m not sure, do we have to fill the various fields as above? I guess this is the only field which can be updated:
Your role within that institution, foundation or company Release Engineer
I am Jehan, maintainer of the GIMP project.
The other person who will be behind this account right now is Bruno (we are sharing access), our main packager and CI warrior.
And I do hope that the GIMP Snap maintainers until now will continue to help us maintaining this package!
@miloslu Hi. Indeed, can confirm on url_to_snapcraft_io/snaps that we are now the onwers of the snap, thank you and everyone involed! But on the public page url_to_snapcraft_io/gimp there are two separate entities being displayed “GIMP” developer and “GIMP team” publisher. On other pages like Kdenlive and Inkscape, for example, only the publisher is displayed.
So, we followed the procedure of “Verify onwership” button on https://snapcraft.io/gimp/listing by adding the DNS txt record on our server: https://github.com/gnome-infra/dns/pull/75. More than 24 hours passed but no success so far. We still see two entities and the “Verify onwership” button still is displayed.
By the way, we are not being able to attach screenshots and Discourse says we can only add up to two links
This is now fixed. The issue was that the DNS record applied to the hostname but not with the www. subdomain. I’ve updated this so that will be taken into account.
Looking at this, the first item (GIMP) is the developer and the second (GIMP team) is the publisher, so we will show both if both are available which is the case for GIMP but not Inkscape
I’ve managed to remove the developer entry so only the publisher will show now. We have a list of verified developers within the site itself, but the GIMP team is also a verified publisher so in this case I removed the developer entry. This fix is live now. Apologies.
@steverydz Not sure if our GIMP server is doing some cron job that makes the DNS records disappear from time to time but the “Verify ownership” feature is behaving wreidly:
However, near to the time I published some revisions, the website stopped to be verified out of the blue
(Also, I noticed while the feature was working that it says “It is not guaranteed that this snap is trustful just because the site is verified”, something like that, which does not make much sense to me since we are a verified publisher and have the website domain in our hands)
The listing page checks the DNS record in real time so if it isn’t present when the page has loaded we can’t show the domain as verified.
In regards to the text, I agree it sends a mixed message. It is intended to cover the case of a publisher who isn’t necessarily verified but they have verified their domain, so we could definitely be smarter about it. I’ve made a ticket for us to look at this so should have a solution shortly.
I’ve updated the tooltip so if a publisher is verified, and the domain is verified then it won’t show the second sentence. That will now only be shown when a non-verified publisher has a verified domain.