README.md

PGP keys map to maven artifacts

This project contains PGP keys map to maven artifacts which should be used to signed.

Contributing

We need help of any other people (the more the better) to build credible keys map, so your contribution is welcome.

Especially you can help, when:

• you want to add more artifacts / plugins
• you find wrong key mapping
• you verify pull request
• you are author who publish something to maven central - let us know about your key
• star / watch project
• share knowledge about project in any way
• give a star for project
• follow us on Twitter

Usage

<project>
    ...
    <build>
        <!-- To define the plugin version in your parent POM -->
        <pluginManagement>
            <plugins>
                <plugin>
                    <groupId>org.simplify4u.plugins</groupId>
                    <artifactId>pgpverify-maven-plugin</artifactId>
                    <version>1.18.2</version>
                    <executions>
                        <execution>
                            <goals>
                                <goal>check</goal>
                            </goals>
                        </execution>
                    </executions>
                    <configuration>
                        <keysMapLocation>/pgp-keys-map.list</keysMapLocation>
                        <verifyPlugins>true</verifyPlugins>
                        <verifyPluginDependencies>true</verifyPluginDependencies>
                        <verifyAtypical>true</verifyAtypical>
                    </configuration>
                    <dependencies>
                        <dependency>
                            <groupId>org.simplify4u</groupId>
                            <artifactId>pgp-keys-map</artifactId>
                            <version>2024.04.04</version>
                        </dependency>
                    </dependencies>
                </plugin>
                ...
            </plugins>
        </pluginManagement>

        <!-- To use the plugin goals in your POM or parent POM -->
        <plugins>
            <plugin>
                <groupId>org.simplify4u.plugins</groupId>
                <artifactId>pgpverify-maven-plugin</artifactId>
            </plugin>
        ...
        </plugins>
    </build>
    ...
</project>