Skip to content

Commit

Permalink
Verify maven dependency checksums (#2986)
Browse files Browse the repository at this point in the history 
* Verify maven dependency checksums

Maven build process will compute checksums for our dependencies and verify them against a local "trusted checksums" file, and fail the build if they do not match. This process is local and independent of checksums stored and downloaded from maven repositories.

SNAPSHOT dependencies are not verified (but released versions should never depend on SNAPSHOT dependencies).
  • Loading branch information
@sstone
sstone authored Jan 27, 2025
1 parent 12df4ce commit 05f7dc3
Show file tree
Hide file tree
Showing 4 changed files with 1,102 additions and 3 deletions.
Loading

0 comments on commit 05f7dc3

Please sign in to comment.