Skip to content

Artifacts should be signed for dependency verification #115

@dlam

Description

@dlam

In AndroidX we are needing to add exceptions for dependency verification for kotlinx-benchmark artifacts.

  These files failed verification:
    - GRADLE_USER_HOME/caches/modules-2/files-2.1/org.jetbrains.kotlinx.benchmark/org.jetbrains.kotlinx.benchmark.gradle.plugin/0.4.8/24d8d69982d768bcfa9c2f4c8aed7fdcec2ae5c3/org.jetbrains.kotlinx.benchmark.gradle.plugin-0.4.8.pom
    - GRADLE_USER_HOME/caches/modules-2/files-2.1/org.jetbrains.kotlinx/kotlinx-benchmark-plugin/0.4.8/452ca78e63a94ede9eb8b9dcfcc6c693708a1b22/kotlinx-benchmark-plugin-0.4.8.jar
    - GRADLE_USER_HOME/caches/modules-2/files-2.1/org.jetbrains.kotlinx/kotlinx-benchmark-plugin/0.4.8/dd0525949f4c23c9468860892d7ed4625a4834b4/kotlinx-benchmark-plugin-0.4.8.module

Repro:

  1. git clone [email protected]:androidx/androidx.git
  2. Manually remove kotlinx.benchmark entries in gradle/verification-metadata.xml
  3. cd collection && ./gradlew collection:collection-benchmark-kmp:assembleBenchmarks

Metadata

Metadata

Assignees

Labels

enhancementNew feature or request

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions