Merge branch 'maven-sign-plugin' of https://github.com/apache/maven-studies into maven-sign-plugin
tree: 51bd6282d1e6b08531b342abcbcc4a6eb2b98873
  1. .github/
  2. src/
  3. .asf.yaml
  4. .gitignore
  5. pom.xml
  6. README.md
README.md

PGP sign plugin

Create PGP signature for all artifacts in maven project

Assumptions

  • first version require maven 3.7.0-SNAPSHOT
  • use build/consumer feature

TODO

  • documentations
  • check if all artifacts are ready to sign - if package goal was running
  • find a good approach to storing passwords
  • detect expired key
  • signing by sub key
  • support keyId in short, long and fingerprint formats - now is long
  • review it test from GPG plugin - maybe some case should be addressed
  • decision - if we should move pgp code to external project