[JIRA] (JPAR-190) Investigate an enforcer to check all jars and poms ~/.m2/.... towards the end of a build

[Rod Widdowson (Jira)]

Rod Widdowson ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=59fb32bbc24efb3c4ed3c977 ) *commented* on JPAR-190 ( https://shibboleth.atlassian.net/browse/JPAR-190?atlOrigin=eyJpIjoiOWE4OTQ3ZjkwMGNjNGFjOGEwYjA2Y2ZkMzg5ZjI2NzEiLCJwIjoiaiJ9 )

Re: Investigate an enforcer to check all jars and poms ~/.m2/.... towards the end of a build ( https://shibboleth.atlassian.net/browse/JPAR-190?atlOrigin=eyJpIjoiOWE4OTQ3ZjkwMGNjNGFjOGEwYjA2Y2ZkMzg5ZjI2NzEiLCJwIjoiaiJ9 )

Status
------

This is largely so I have a manageable to do list

* Prototype written. I need to refactor this
* Multiple keyrings generated and Grand-Fathered in (thaank to Ian Young ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3Ae127cb03-43ed-473d-b6ba-592949cb4be8 ) )
* 5 jar files need self signed (plus one with a bogus signature in our nexus)

* 
asm/asm 3.3.1
com.google.code.findbugs/jsr305 1.3.9
javax.annotation/jsr250-api 1.0
javax.inject/javax.inject 1
org.codehaus.plexus/plexus-i18n 1.0-beta-10
org.ow2.asm/asm 6.2

* 11 KeyIds needed

* 
0X00ECB0B904931A76 for com.google.guava
0X3FAAD2CD5ECBB314 for commons-codec
0X5BCEE695141E6086 for javax.enterprise
0XC7CB325467893CC4 for junit
0X75BF031B7C94E183 for net.java.dev.jna
0X5EFAD9FE82A7FBCD for org.apache.ant
0X012579464D01C06A for org.apache.maven
0X44146BCAA1F1E051 for org.codehaus.plexus
0X8B0378A57CD8E243 for org.codehaus.plexus
0X01D734EE5EE9C3F8 for org.eclipse.sisu
0X7DC3076FE22D4F88 for org.nibor.autolink

( https://shibboleth.atlassian.net/browse/JPAR-190#add-comment?atlOrigin=eyJpIjoiOWE4OTQ3ZjkwMGNjNGFjOGEwYjA2Y2ZkMzg5ZjI2NzEiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/JPAR-190#add-comment?atlOrigin=eyJpIjoiOWE4OTQ3ZjkwMGNjNGFjOGEwYjA2Y2ZkMzg5ZjI2NzEiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100180- sha1:6623038 )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20211006/53dd355c/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-f2e96b0a-de77-4907-8d8e-8a8c838548b8
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20211006/53dd355c/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-84c1c4af-b9d9-4c57-81c4-ad3eebeb3037
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20211006/53dd355c/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-328098ee-4307-4c7b-89d9-3458a148c90d
Type: image/png
Size: 468 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20211006/53dd355c/attachment-0005.png>