Replies: 1 comment
-
|
Moved to GH-699. |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
-
Brief description
Be able to provide an optional SHA1/MD5/SHA256 digests, and possibly a GPG signature, in binaryUrlPlugins.
Aims and goals
Improve the stance on security to allow users to detect if their dependencies have changed without them realising.
Workarounds
Store the artifacts in a well-known and trusted registry.
Potential implementation
Beta Was this translation helpful? Give feedback.
All reactions