[java-identity-provider] 02/03: Turn on Sig checking by the enforcer in maint-4.1

Rod Widdowson rdw at steadingsoftware.com
Fri Dec 17 13:45:53 UTC 2021


This is an automated email from the git hooks/post-receive script.

rdw pushed a commit to branch maint-4.1
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=e21a038a0972cec37c44c9e57915609de682cf06

commit e21a038a0972cec37c44c9e57915609de682cf06
Author: Rod Widdowson <rdw at steadingsoftware.com>
AuthorDate: Fri Dec 17 13:28:28 2021 +0000

    Turn on Sig checking by the enforcer in maint-4.1
    
    We cannot turn on dependency checking because of JMVN-15
    and IDP-1860.
    
    We cannot turn on
---
 idp-distribution/pom.xml | 37 +++++++++++++++++++++++++++++++++++++
 1 file changed, 37 insertions(+)

diff --git a/idp-distribution/pom.xml b/idp-distribution/pom.xml
index 95c4ec334..84237d22a 100644
--- a/idp-distribution/pom.xml
+++ b/idp-distribution/pom.xml
@@ -250,6 +250,43 @@
                     <tarLongFileMode>gnu</tarLongFileMode>
                 </configuration>
             </plugin>
+            <plugin>
+                <groupId>org.apache.maven.plugins</groupId>
+                <artifactId>maven-enforcer-plugin</artifactId>
+                <dependencies>
+                    <dependency>
+                        <groupId>net.shibboleth.maven.enforcer.rules</groupId>
+                        <artifactId>maven-dist-enforcer</artifactId>
+                        <version>3.0.0</version>
+                    </dependency>
+                </dependencies>
+                <executions>
+                    <execution>
+                        <id>idp-enforce</id>
+                        <phase>verify</phase>
+                        <goals>
+                            <goal>enforce</goal>
+                        </goals>
+                        <configuration>
+                            <rules>
+                                <jarEnforcer implementation="net.shibboleth.mvn.enforcer.impl.JarEnforcer">
+                                    <dataGroupId>net.shibboleth.maven.enforcer.rules</dataGroupId>
+                                    <dataArtifactId>maven-dist-enforcer-data</dataArtifactId>
+                                    <dataVersion>1.0.0-SNAPSHOT</dataVersion>
+                                    <dataKeyRing>${basedir}/src/main/enforcer/shibbolethKeys.gpg</dataKeyRing>
+                                    <parentPomDir>${basedir}/../idp-parent</parentPomDir>
+                                    <zipFiles>${project.build.directory}/${idp.finalName}.zip</zipFiles>
+                                    <tgzFiles>${project.build.directory}/${idp.finalName}.tar.gz</tgzFiles>
+                                    <checkSignatures>true</checkSignatures>
+                                    <checkDependencies>false</checkDependencies>
+                                    <listJarSources>false</listJarSources>
+                                    <checkM2>false</checkM2>
+                                </jarEnforcer>
+                            </rules>
+                        </configuration>
+                    </execution>
+                </executions>
+            </plugin>
         </plugins>
     </build>
 </project>

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.


More information about the commits mailing list