[java-identity-provider] branch main updated: JPAR-190 Investigate an enforcer to check all jars and poms ~/.m2/.... towards the end of a build

Rod Widdowson rdw at steadingsoftware.com
Fri Oct 8 14:18:39 UTC 2021


This is an automated email from the git hooks/post-receive script.

rdw pushed a commit to branch main
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=94b3fd0238be0424717112e41a913e9c1540da7e

The following commit(s) were added to refs/heads/main by this push:
       new  94b3fd023 JPAR-190  Investigate an enforcer to check all jars and poms ~/.m2/.... towards the end of a build
94b3fd023 is described below

commit 94b3fd0238be0424717112e41a913e9c1540da7e
Author: Rod Widdowson <rdw at steadingsoftware.com>
AuthorDate: Fri Oct 8 15:17:18 2021 +0100

    JPAR-190  Investigate an enforcer to check all jars and poms ~/.m2/.... towards the end of a build
    
    https://shibboleth.atlassian.net/browse/JPAR-190
    
     - Grandfather in some more keys
     - Some artefacts have weird names ('noaop')and the eaiest way to locate
       their keys is to store them locally.
---
 .../src/main/enforcer/keyRings/com.google.guava.gpg | Bin 2660 -> 3895 bytes
 .../main/enforcer/keyRings/com.google.inject.gpg    | Bin 0 -> 1224 bytes
 .../src/main/enforcer/keyRings/commons-codec.gpg    | Bin 7882 -> 16260 bytes
 .../src/main/enforcer/keyRings/javax.enterprise.gpg | Bin 0 -> 2003 bytes
 .../src/main/enforcer/keyRings/junit.gpg            | Bin 5900 -> 7155 bytes
 .../src/main/enforcer/keyRings/net.java.dev.jna.gpg | Bin 0 -> 1234 bytes
 .../src/main/enforcer/keyRings/org.apache.ant.gpg   | Bin 2658 -> 10469 bytes
 .../src/main/enforcer/keyRings/org.apache.maven.gpg | Bin 7423 -> 8652 bytes
 .../main/enforcer/keyRings/org.codehaus.plexus.gpg  | Bin 28085 -> 30938 bytes
 .../src/main/enforcer/keyRings/org.eclipse.sisu.gpg | Bin 0 -> 2276 bytes
 .../main/enforcer/keyRings/org.nibor.autolink.gpg   | Bin 1231 -> 3560 bytes
 .../main/enforcer/keyRings/org.sonatype.sisu.gpg    | Bin 1226 -> 2443 bytes
 .../localSignatures/guice-4.2.2-no_aop.jar.asc      |  11 +++++++++++
 .../localSignatures/sisu-guice-2.1.7-noaop.jar.asc  |   7 +++++++
 .../localSignatures/sisu-guice-3.1.0-no_aop.jar.asc |   7 +++++++
 15 files changed, 25 insertions(+)

diff --git a/idp-distribution/src/main/enforcer/keyRings/com.google.guava.gpg b/idp-distribution/src/main/enforcer/keyRings/com.google.guava.gpg
index 713df0e59..f2bab609c 100644
Binary files a/idp-distribution/src/main/enforcer/keyRings/com.google.guava.gpg and b/idp-distribution/src/main/enforcer/keyRings/com.google.guava.gpg differ
diff --git a/idp-distribution/src/main/enforcer/keyRings/com.google.inject.gpg b/idp-distribution/src/main/enforcer/keyRings/com.google.inject.gpg
new file mode 100644
index 000000000..0205a34a9
Binary files /dev/null and b/idp-distribution/src/main/enforcer/keyRings/com.google.inject.gpg differ
diff --git a/idp-distribution/src/main/enforcer/keyRings/commons-codec.gpg b/idp-distribution/src/main/enforcer/keyRings/commons-codec.gpg
index 587f88eb9..520765424 100644
Binary files a/idp-distribution/src/main/enforcer/keyRings/commons-codec.gpg and b/idp-distribution/src/main/enforcer/keyRings/commons-codec.gpg differ
diff --git a/idp-distribution/src/main/enforcer/keyRings/javax.enterprise.gpg b/idp-distribution/src/main/enforcer/keyRings/javax.enterprise.gpg
index e69de29bb..1c35a8e7a 100644
Binary files a/idp-distribution/src/main/enforcer/keyRings/javax.enterprise.gpg and b/idp-distribution/src/main/enforcer/keyRings/javax.enterprise.gpg differ
diff --git a/idp-distribution/src/main/enforcer/keyRings/junit.gpg b/idp-distribution/src/main/enforcer/keyRings/junit.gpg
index 291af798c..638f859d7 100644
Binary files a/idp-distribution/src/main/enforcer/keyRings/junit.gpg and b/idp-distribution/src/main/enforcer/keyRings/junit.gpg differ
diff --git a/idp-distribution/src/main/enforcer/keyRings/net.java.dev.jna.gpg b/idp-distribution/src/main/enforcer/keyRings/net.java.dev.jna.gpg
index e69de29bb..cdcb3e7b4 100644
Binary files a/idp-distribution/src/main/enforcer/keyRings/net.java.dev.jna.gpg and b/idp-distribution/src/main/enforcer/keyRings/net.java.dev.jna.gpg differ
diff --git a/idp-distribution/src/main/enforcer/keyRings/org.apache.ant.gpg b/idp-distribution/src/main/enforcer/keyRings/org.apache.ant.gpg
index 34e30be2f..4bdf2649e 100644
Binary files a/idp-distribution/src/main/enforcer/keyRings/org.apache.ant.gpg and b/idp-distribution/src/main/enforcer/keyRings/org.apache.ant.gpg differ
diff --git a/idp-distribution/src/main/enforcer/keyRings/org.apache.maven.gpg b/idp-distribution/src/main/enforcer/keyRings/org.apache.maven.gpg
index 0ad687d15..4fb362818 100644
Binary files a/idp-distribution/src/main/enforcer/keyRings/org.apache.maven.gpg and b/idp-distribution/src/main/enforcer/keyRings/org.apache.maven.gpg differ
diff --git a/idp-distribution/src/main/enforcer/keyRings/org.codehaus.plexus.gpg b/idp-distribution/src/main/enforcer/keyRings/org.codehaus.plexus.gpg
index 9e48fb690..55c7f3ba8 100644
Binary files a/idp-distribution/src/main/enforcer/keyRings/org.codehaus.plexus.gpg and b/idp-distribution/src/main/enforcer/keyRings/org.codehaus.plexus.gpg differ
diff --git a/idp-distribution/src/main/enforcer/keyRings/org.eclipse.sisu.gpg b/idp-distribution/src/main/enforcer/keyRings/org.eclipse.sisu.gpg
index e69de29bb..fb437eb93 100644
Binary files a/idp-distribution/src/main/enforcer/keyRings/org.eclipse.sisu.gpg and b/idp-distribution/src/main/enforcer/keyRings/org.eclipse.sisu.gpg differ
diff --git a/idp-distribution/src/main/enforcer/keyRings/org.nibor.autolink.gpg b/idp-distribution/src/main/enforcer/keyRings/org.nibor.autolink.gpg
index b9c2840ad..5a5be1c95 100644
Binary files a/idp-distribution/src/main/enforcer/keyRings/org.nibor.autolink.gpg and b/idp-distribution/src/main/enforcer/keyRings/org.nibor.autolink.gpg differ
diff --git a/idp-distribution/src/main/enforcer/keyRings/org.sonatype.sisu.gpg b/idp-distribution/src/main/enforcer/keyRings/org.sonatype.sisu.gpg
index 1491544a3..dd474de3e 100644
Binary files a/idp-distribution/src/main/enforcer/keyRings/org.sonatype.sisu.gpg and b/idp-distribution/src/main/enforcer/keyRings/org.sonatype.sisu.gpg differ
diff --git a/idp-distribution/src/main/enforcer/localSignatures/guice-4.2.2-no_aop.jar.asc b/idp-distribution/src/main/enforcer/localSignatures/guice-4.2.2-no_aop.jar.asc
new file mode 100644
index 000000000..9661c3dbe
--- /dev/null
+++ b/idp-distribution/src/main/enforcer/localSignatures/guice-4.2.2-no_aop.jar.asc
@@ -0,0 +1,11 @@
+-----BEGIN PGP SIGNATURE-----
+
+iQFFBAABCgAvFiEEFhYnMHn+Y+Mck48Q8N8h0dCjw4QFAlvXQ3cRHHNhbWViQGdv
+b2dsZS5jb20ACgkQ8N8h0dCjw4Q+yggAy9rsmy2vZMp/9m1e9IqZGbGewjqaNbev
+qRYU1Xg3Gcpf7bl+99kX1Dgijqf+nTAmsDcO7rUtJKePm03yL6x01CC5gbg3hDo1
+VeRgCy4BUkCrRibk4LZ7iybBlNhc4bsZJbMY3vgKFgzakrMuO+NynAlWU+Kgc1ZY
+MxLvU454EVI5Z5JhWvKSR9iY3YXqSexBCZawv4WAeE1o1S4O1PdBt1jUtHVO5LsF
+Fi1rpKpoSR/3/o2Cn94Ep6ppQXYa5PhW6DQvyYKwXCZd6YNDQoeR9aM8zu6M0Ysc
+/7iREWpJptqBs2EsY4GVuuem0iZOgoeZHJlnWrB2g8PFaLL2Rj1sOQ==
+=kiBY
+-----END PGP SIGNATURE-----
diff --git a/idp-distribution/src/main/enforcer/localSignatures/sisu-guice-2.1.7-noaop.jar.asc b/idp-distribution/src/main/enforcer/localSignatures/sisu-guice-2.1.7-noaop.jar.asc
new file mode 100644
index 000000000..763db5c31
--- /dev/null
+++ b/idp-distribution/src/main/enforcer/localSignatures/sisu-guice-2.1.7-noaop.jar.asc
@@ -0,0 +1,7 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v1.4.7 (MingW32)
+
+iD8DBQBMkQX5LiAQ+Kf/SkERAjFZAJ4r5FLdApg9lwDOjoes2mCIxY1NSgCdFXno
+jeKBdFuA90uSoTEku+ANDP8=
+=nSpk
+-----END PGP SIGNATURE-----
diff --git a/idp-distribution/src/main/enforcer/localSignatures/sisu-guice-3.1.0-no_aop.jar.asc b/idp-distribution/src/main/enforcer/localSignatures/sisu-guice-3.1.0-no_aop.jar.asc
new file mode 100644
index 000000000..527ce36e2
--- /dev/null
+++ b/idp-distribution/src/main/enforcer/localSignatures/sisu-guice-3.1.0-no_aop.jar.asc
@@ -0,0 +1,7 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v1.4.9 (Darwin)
+
+iEYEABECAAYFAk5hbjUACgkQUuZYXgECuE2KBACghdWbxKaOzF8zvZsjfayogjjY
+RyoAnAkTkJd4oHgawkmaxLPWcH7ugVLz
+=cA1V
+-----END PGP SIGNATURE-----

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.


More information about the commits mailing list