Summary
GPG keys should be properly linked from the source tarball page
Details
The links on the source page for PHP 8.3's can be seen here: https://www.php.net/downloads.php?source=Y
If you scroll down to php 8.3.25, there is a link to "GPG Keys for PHP 8.3". This takes the user to this page:
https://www.php.net/downloads.php#gpg-8.3
The page does not contain the GPG keys, so users who choose to verify the code cannot do so.
Additional context
No response
Summary
GPG keys should be properly linked from the source tarball page
Details
The links on the source page for PHP 8.3's can be seen here: https://www.php.net/downloads.php?source=Y
If you scroll down to php 8.3.25, there is a link to "GPG Keys for PHP 8.3". This takes the user to this page:
https://www.php.net/downloads.php#gpg-8.3
The page does not contain the GPG keys, so users who choose to verify the code cannot do so.
Additional context
No response