...
Continue using the existing Beijing ONAP signing process to sing sign Nexus2 Maven Artifacts. Sign Casablanca Docker containers using the LF Nexus 3 Maven artifact signing process if it is available in time.
...
A project produces a staging repository in Nexus. When the project is ready to release they contact the ODL Helpdesk with the staging repo and version of the software they wish to release. Helpdesk then performs the following:
1. Takes the staging repo and signs all the artifacts in there producing a 2nd staging repo containing the signatures
...