i

integrity-maven-plugin

This plugin is a proof of concept for a maven plugin that can be used to validate the integrity of a maven repository. It does this by generating a lock file that contains the checksums of all the artifacts in the repository. The lock file can then be used to validate the integrity of the repository. This guards the supply chain against malicious actors that might tamper with the artifacts in the repository.
https://github.com/chains-project/maven-lockfile
MIT
Martin Wittlinger
checksums tamper against concept generating used repository supply guards that malicious integrity file does lock proof validate artifacts chain maven might this then actors with contains plugin
Files download
File Operation
integrity-maven-plugin-0.3.2.jar download
integrity-maven-plugin-0.3.2.pom download
integrity-maven-plugin-0.3.2-sources.jar download
Apache Maven 
<dependency>
  <groupId>io.github.chains-project</groupId>
  <artifactId>integrity-maven-plugin</artifactId>
  <version>0.3.2</version>
  <type>maven-plugin</type>
</dependency>
Gradle Groovy 
implementation 'io.github.chains-project:integrity-maven-plugin:0.3.2'
Gradle Kotlin 
implementation("io.github.chains-project:integrity-maven-plugin:0.3.2")
Scala SBT 
libraryDependencies += "io.github.chains-project" % "integrity-maven-plugin" % "0.3.2"
Groovy Grape 
@Grapes(
  @Grab(group='io.github.chains-project', module='integrity-maven-plugin', version='0.3.2')
)
Apache Ivy 
<dependency org="io.github.chains-project" name="integrity-maven-plugin" rev="0.3.2" />
Leiningen 
[io.github.chains-project/integrity-maven-plugin "0.3.2"]
Apache Buildr 
'io.github.chains-project:integrity-maven-plugin:jar:0.3.2'
Dependencies

compile

|-- com.google.code.gson:gson:2.10.1

|-- org.apache.maven.resolver:maven-resolver-api:1.9.7

|-- org.slf4j:log4j-over-slf4j:2.0.7

|-- org.apache.logging.log4j:log4j-core:2.20.0

|-- com.google.guava:guava:31.1-jre

|-- org.apache.maven.shared:maven-dependency-tree:3.2.1

|-- org.apache.maven.shared:maven-artifact-transfer:0.13.1

provided

|-- org.apache.maven:maven-plugin-api:3.2.5

|-- org.apache.maven.plugin-tools:maven-plugin-annotations:3.2

|-- org.apache.maven:maven-core:3.2.5

test

|-- org.junit.jupiter:junit-jupiter-api:5.9.2

|-- org.apache.maven.plugin-testing:maven-plugin-testing-harness:3.3.0

|-- org.apache.maven:maven-compat:3.9.1

|-- org.junit.jupiter:junit-jupiter-engine:5.9.2

|-- com.soebes.itf.jupiter.extension:itf-jupiter-extension:0.12.0

|-- com.soebes.itf.jupiter.extension:itf-assertj:0.12.0

|-- org.instancio:instancio:1.0.4