i

integrity-maven-plugin

This plugin is a proof of concept for a maven plugin that can be used to validate the integrity of a maven repository. It does this by generating a lock file that contains the checksums of all the artifacts in the repository. The lock file can then be used to validate the integrity of the repository. This guards the supply chain against malicious actors that might tamper with the artifacts in the repository.
https://github.com/chains-project/maven-lockfile
MIT
Martin Wittlinger
checksums tamper against concept generating used repository supply guards that malicious integrity file does lock proof validate artifacts chain maven might this then actors with contains plugin
文件下载
文件名 操作
integrity-maven-plugin-0.3.2.jar 下载
integrity-maven-plugin-0.3.2.pom 下载
integrity-maven-plugin-0.3.2-sources.jar 下载
Apache Maven 
<dependency>
  <groupId>io.github.chains-project</groupId>
  <artifactId>integrity-maven-plugin</artifactId>
  <version>0.3.2</version>
  <type>maven-plugin</type>
</dependency>
Gradle Groovy 
implementation 'io.github.chains-project:integrity-maven-plugin:0.3.2'
Gradle Kotlin 
implementation("io.github.chains-project:integrity-maven-plugin:0.3.2")
Scala SBT 
libraryDependencies += "io.github.chains-project" % "integrity-maven-plugin" % "0.3.2"
Groovy Grape 
@Grapes(
  @Grab(group='io.github.chains-project', module='integrity-maven-plugin', version='0.3.2')
)
Apache Ivy 
<dependency org="io.github.chains-project" name="integrity-maven-plugin" rev="0.3.2" />
Leiningen 
[io.github.chains-project/integrity-maven-plugin "0.3.2"]
Apache Buildr 
'io.github.chains-project:integrity-maven-plugin:jar:0.3.2'
本项目依赖

compile

|-- com.google.code.gson:gson:2.10.1

|-- org.apache.maven.resolver:maven-resolver-api:1.9.7

|-- org.slf4j:log4j-over-slf4j:2.0.7

|-- org.apache.logging.log4j:log4j-core:2.20.0

|-- com.google.guava:guava:31.1-jre

|-- org.apache.maven.shared:maven-dependency-tree:3.2.1

|-- org.apache.maven.shared:maven-artifact-transfer:0.13.1

provided

|-- org.apache.maven:maven-plugin-api:3.2.5

|-- org.apache.maven.plugin-tools:maven-plugin-annotations:3.2

|-- org.apache.maven:maven-core:3.2.5

test

|-- org.junit.jupiter:junit-jupiter-api:5.9.2

|-- org.apache.maven.plugin-testing:maven-plugin-testing-harness:3.3.0

|-- org.apache.maven:maven-compat:3.9.1

|-- org.junit.jupiter:junit-jupiter-engine:5.9.2

|-- com.soebes.itf.jupiter.extension:itf-jupiter-extension:0.12.0

|-- com.soebes.itf.jupiter.extension:itf-assertj:0.12.0

|-- org.instancio:instancio:1.0.4