summaryrefslogtreecommitdiffstats
path: root/org.eclipse.jgit.packaging/org.eclipse.jgit.repository/pom.xml
diff options
context:
space:
mode:
authorMatthias Sohn <matthias.sohn@sap.com>2023-05-03 14:39:17 +0200
committerThomas Wolf <twolf@apache.org>2023-05-23 19:47:08 +0200
commit0d92f543f5a41d707daf9a8fd12bac26674f1502 (patch)
treec44827c0239c3ed3946d38a6beca3601df26f1a9 /org.eclipse.jgit.packaging/org.eclipse.jgit.repository/pom.xml
parentf8038b6b586f32a417609600c45f1e1ced45be9c (diff)
downloadjgit-0d92f543f5a41d707daf9a8fd12bac26674f1502.tar.gz
jgit-0d92f543f5a41d707daf9a8fd12bac26674f1502.zip
PGP sign p2 artefacts
This ensures bundles directly pulled from Maven Central are PGP signed by Tycho. See https://docs.google.com/document/d/1MnDBvOUwKvKacB-QKnH_PzK88dUlHkjs-D-DWEKmvkY Change-Id: I2a9308c091e602d40a1c143edb506a3e43dd0dc2
Diffstat (limited to 'org.eclipse.jgit.packaging/org.eclipse.jgit.repository/pom.xml')
-rw-r--r--org.eclipse.jgit.packaging/org.eclipse.jgit.repository/pom.xml33
1 files changed, 33 insertions, 0 deletions
diff --git a/org.eclipse.jgit.packaging/org.eclipse.jgit.repository/pom.xml b/org.eclipse.jgit.packaging/org.eclipse.jgit.repository/pom.xml
index 2a127bc9b6..058aa695db 100644
--- a/org.eclipse.jgit.packaging/org.eclipse.jgit.repository/pom.xml
+++ b/org.eclipse.jgit.packaging/org.eclipse.jgit.repository/pom.xml
@@ -107,4 +107,37 @@
<version>${project.version}</version>
</dependency>
</dependencies>
+
+ <profiles>
+ <profile>
+ <id>gpg-sign</id>
+ <build>
+ <plugins>
+ <plugin>
+ <groupId>org.eclipse.tycho</groupId>
+ <artifactId>tycho-gpg-plugin</artifactId>
+ <executions>
+ <execution>
+ <id>pgpsigner</id>
+ <phase>package</phase>
+ <goals>
+ <goal>sign-p2-artifacts</goal>
+ </goals>
+ <configuration>
+ <keyname>E3E144E1</keyname> <!-- JGit public key -->
+ <skipIfJarsigned>true</skipIfJarsigned> <!-- Sign if not already JAR-signed. -->
+ <forceSignature>
+ <bundle>bcpg</bundle>
+ <bundle>bcpkix</bundle>
+ <bundle>bcprov</bundle>
+ <bundle>bcutil</bundle>
+ </forceSignature>
+ </configuration>
+ </execution>
+ </executions>
+ </plugin>
+ </plugins>
+ </build>
+ </profile>
+ </profiles>
</project>