[java-idp-plugin-duo] branch main updated: JPAR-182 Check our Distributions for consistency
Rod Widdowson
rdw at steadingsoftware.com
Tue Sep 28 15:51:01 UTC 2021
This is an automated email from the git hooks/post-receive script.
rdw pushed a commit to branch main
in repository java-idp-plugin-duo.
View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-duo.git;a=commit;h=aa009a307d475e8de12db7d537e026b0c17f863b
The following commit(s) were added to refs/heads/main by this push:
new aa009a3 JPAR-182 Check our Distributions for consistency
aa009a3 is described below
commit aa009a307d475e8de12db7d537e026b0c17f863b
Author: Rod Widdowson <rdw at steadingsoftware.com>
AuthorDate: Sat Sep 25 16:21:22 2021 +0100
JPAR-182 Check our Distributions for consistency
https://shibboleth.atlassian.net/browse/JPAR-182
Add Jar sig checking
---
idp-duo-nimbus-distribution/pom.xml | 32 +++++++++++++++++++
idp-duo-sdk-distribution/pom.xml | 34 ++++++++++++++++++++-
.../src/main/enforcer/keyRings/com.auth0.gpg | Bin 0 -> 1226 bytes
.../src/main/enforcer/keyRings/com.duosecurity.gpg | Bin 0 -> 1223 bytes
.../enforcer/keyRings/com.squareup.okhttp3.gpg | Bin 0 -> 3535 bytes
.../main/enforcer/keyRings/com.squareup.okio.gpg | Bin 0 -> 2293 bytes
.../enforcer/keyRings/com.squareup.retrofit2.gpg | Bin 0 -> 2487 bytes
.../main/enforcer/keyRings/org.projectlombok.gpg | Bin 0 -> 1210 bytes
8 files changed, 65 insertions(+), 1 deletion(-)
diff --git a/idp-duo-nimbus-distribution/pom.xml b/idp-duo-nimbus-distribution/pom.xml
index a5ab5e8..ab4c00a 100644
--- a/idp-duo-nimbus-distribution/pom.xml
+++ b/idp-duo-nimbus-distribution/pom.xml
@@ -44,6 +44,38 @@
</execution>
</executions>
</plugin>
+ <plugin>
+ <groupId>org.apache.maven.plugins</groupId>
+ <artifactId>maven-enforcer-plugin</artifactId>
+ <dependencies>
+ <dependency>
+ <groupId>net.shibboleth.maven.enforcer.rules</groupId>
+ <artifactId>maven-dist-enforcer</artifactId>
+ <version>2.0.0</version>
+ </dependency>
+ </dependencies>
+ <executions>
+ <execution>
+ <id>duo-nimbus-enforce</id>
+ <phase>verify</phase>
+ <goals>
+ <goal>enforce</goal>
+ </goals>
+ <configuration>
+ <rules>
+ <jarEnforcer implementation="net.shibboleth.mvn.enforcer.impl.JarEnforcer">
+ <enforcerData>${basedir}/src/main/enforcer</enforcerData>
+ <parentPomDir>${basedir}/..</parentPomDir>
+ <jarDirs>${basedir}/../idp-duo-nimbus-client-impl/target/dependency</jarDirs>
+ <checkSignatures>true</checkSignatures>
+ <checkDependencies>false</checkDependencies>
+ <listJarSources>false</listJarSources>
+ </jarEnforcer>
+ </rules>
+ </configuration>
+ </execution>
+ </executions>
+ </plugin>
</plugins>
</build>
diff --git a/idp-duo-sdk-distribution/pom.xml b/idp-duo-sdk-distribution/pom.xml
index b2985a9..c17b788 100644
--- a/idp-duo-sdk-distribution/pom.xml
+++ b/idp-duo-sdk-distribution/pom.xml
@@ -44,8 +44,40 @@
</execution>
</executions>
</plugin>
+ <plugin>
+ <groupId>org.apache.maven.plugins</groupId>
+ <artifactId>maven-enforcer-plugin</artifactId>
+ <dependencies>
+ <dependency>
+ <groupId>net.shibboleth.maven.enforcer.rules</groupId>
+ <artifactId>maven-dist-enforcer</artifactId>
+ <version>2.0.0</version>
+ </dependency>
+ </dependencies>
+ <executions>
+ <execution>
+ <id>duo-sdk-enforce</id>
+ <phase>verify</phase>
+ <goals>
+ <goal>enforce</goal>
+ </goals>
+ <configuration>
+ <rules>
+ <jarEnforcer implementation="net.shibboleth.mvn.enforcer.impl.JarEnforcer">
+ <enforcerData>${basedir}/src/main/enforcer</enforcerData>
+ <parentPomDir>${basedir}/..</parentPomDir>
+ <jarDirs>${basedir}/../idp-duo-sdk-client-impl/target/dependency</jarDirs>
+ <checkSignatures>true</checkSignatures>
+ <checkDependencies>false</checkDependencies>
+ <listJarSources>false</listJarSources>
+ </jarEnforcer>
+ </rules>
+ </configuration>
+ </execution>
+ </executions>
+ </plugin>
</plugins>
</build>
-</project>
\ No newline at end of file
+</project>
diff --git a/idp-duo-sdk-distribution/src/main/enforcer/keyRings/com.auth0.gpg b/idp-duo-sdk-distribution/src/main/enforcer/keyRings/com.auth0.gpg
new file mode 100644
index 0000000..5754820
Binary files /dev/null and b/idp-duo-sdk-distribution/src/main/enforcer/keyRings/com.auth0.gpg differ
diff --git a/idp-duo-sdk-distribution/src/main/enforcer/keyRings/com.duosecurity.gpg b/idp-duo-sdk-distribution/src/main/enforcer/keyRings/com.duosecurity.gpg
new file mode 100644
index 0000000..3094bc6
Binary files /dev/null and b/idp-duo-sdk-distribution/src/main/enforcer/keyRings/com.duosecurity.gpg differ
diff --git a/idp-duo-sdk-distribution/src/main/enforcer/keyRings/com.squareup.okhttp3.gpg b/idp-duo-sdk-distribution/src/main/enforcer/keyRings/com.squareup.okhttp3.gpg
new file mode 100644
index 0000000..e4cc2ea
Binary files /dev/null and b/idp-duo-sdk-distribution/src/main/enforcer/keyRings/com.squareup.okhttp3.gpg differ
diff --git a/idp-duo-sdk-distribution/src/main/enforcer/keyRings/com.squareup.okio.gpg b/idp-duo-sdk-distribution/src/main/enforcer/keyRings/com.squareup.okio.gpg
new file mode 100644
index 0000000..0a4436b
Binary files /dev/null and b/idp-duo-sdk-distribution/src/main/enforcer/keyRings/com.squareup.okio.gpg differ
diff --git a/idp-duo-sdk-distribution/src/main/enforcer/keyRings/com.squareup.retrofit2.gpg b/idp-duo-sdk-distribution/src/main/enforcer/keyRings/com.squareup.retrofit2.gpg
new file mode 100644
index 0000000..b8f3ffa
Binary files /dev/null and b/idp-duo-sdk-distribution/src/main/enforcer/keyRings/com.squareup.retrofit2.gpg differ
diff --git a/idp-duo-sdk-distribution/src/main/enforcer/keyRings/org.projectlombok.gpg b/idp-duo-sdk-distribution/src/main/enforcer/keyRings/org.projectlombok.gpg
new file mode 100644
index 0000000..7e717bf
Binary files /dev/null and b/idp-duo-sdk-distribution/src/main/enforcer/keyRings/org.projectlombok.gpg differ
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
More information about the commits
mailing list