java-module-testing/gradle/verification-metadata.xml at 3e40f113bad795565fc6eca0aabeeefd7bc7e3a8 · gradlex-org/java-module-testing · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
<?xml version="1.0" encoding="UTF-8"?>
<verification-metadata xmlns="https://schema.gradle.org/dependency-verification" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="https://schema.gradle.org/dependency-verification https://schema.gradle.org/dependency-verification/dependency-verification-1.3.xsd">
   <configuration>
      <verify-metadata>false</verify-metadata>
      <!-- use 'TRUE' instead of 'true' so that Renovate ignores it -->
      <verify-signatures>TRUE</verify-signatures>
      <keyring-format>armored</keyring-format>
      <key-servers enabled="false"/>
      <trusted-artifacts>
         <trust file=".*-javadoc[.]jar" regex="true"/>
         <trust file=".*-sources[.]jar" regex="true"/>
         <trust file="^gradle-\d+\.\d+(?:\.\d+)?(?:-(?:rc|milestone)-\d+)?-src\.zip$" regex="true"/>
      </trusted-artifacts>
      <trusted-keys>
         <!-- BUILD: CONVENTIONS -->
         <!-- ✅ Signed by the GradleX organisation (us) -->
         <trusted-key id="66D7CBFF956830FE9F5A723AFE6C7D77A1CE15A6" group="org.gradlex"/>


         <!-- BUILD: PLUGIN PUBLISHING - Gradle plugin publishing plugin with transitive dependency -->
         <!-- ✅ Signed by Gradle Inc. -->
         <trusted-key id="1BD97A6A154E7810EE0BC832E2F38302C8075E3D" group="com.gradle.publish" name="plugin-publish-plugin"/>
         <!-- ✅ Signed by ASF - Robert Scholte -->
         <trusted-key id="B02137D875D833D9B23392ECAE5A7FB608A0221C" group="org.apache.maven" name="maven-model"/>


         <!-- BUILD: MAVEN CENTRAL PUBLISHING - Gradle Up plugin with transitive dependency -->
         <!-- ✅ Signed by GradleUp project -->
         <trusted-key id="4857D1CE04E78FAB2A172E8F39B48E1BADDB933F" group="com.gradleup.nmcp">
            <trusting group="com.gradleup.nmcp"/>
            <trusting group="com.gradleup.gratatouille"/>
         </trusted-key>
         <!-- ✅ Signed by JetBrains -->
         <trusted-key id="E7DC75FC24FB3C8DFE8086AD3D5839A2262CBBFB" group="org.jetbrains.kotlinx"/>
         <!-- ✅ Signed by Paul de Vrieze - XmlUtil -->
         <trusted-key id="05F1A5DA5701D415BEFC67FC6329ADE2B25B244B" group="io.github.pdvrieze.xmlutil"/>


         <!-- BUILD: ANALYSIS - Gradle Develocity plugins -->
         <!-- ✅ Signed by Gradle Inc. -->
         <trusted-key id="7B79ADD11F8A779FE90FD3D0893A028475557671" group="com.gradle"/>


         <!-- TESTING - JUnit, AssertJ, and Gradle Exemplar with transitive dependencies -->
         <!-- ✅ Signed by JUnit - Marc Philipp -->
         <trusted-key id="FF6E2C001948C5F2F38B0CC385911F425EC61B51">
            <trusting group="junit"/>
            <trusting group="org.apiguardian"/>
            <trusting group="org.junit.jupiter"/>
            <trusting group="org.junit.platform"/>
            <trusting group="org.junit.vintage"/>
            <trusting group="org.opentest4j"/>
         </trusted-key>
         <!-- ✅ Signed by Hamcrest - Tom Denley -->
         <trusted-key id="4DB1A49729B053CAF015CEE9A6ADFC93EF34893E" group="org.hamcrest" name="hamcrest-core"/>
         <!-- ✅ Signed by Gradle Inc. -->
         <trusted-key id="1BD97A6A154E7810EE0BC832E2F38302C8075E3D" group="org.gradle.exemplar"/>
         <!-- ✅ Signed by ASF - Gary David Gregory -->
         <trusted-key id="2DB4F1EF0FA761ECC4EA935C86FDC7E2A11262CB">
            <trusting group="org.apache.commons"/>
            <trusting group="commons-codec"/>
            <trusting group="commons-io"/>
         </trusted-key>
         <!-- ✅ Signed by Andrea Peruffo - com.typesafe.config  -->
         <trusted-key id="E88BF2559874BA889D34357C0555B3BA1CA4ECF9" group="com.typesafe" name="config"/>
         <!-- ✅ Signed by AssertJ  -->
         <trusted-key id="BE685132AFD2740D9095F9040CC0B712FEE75827" group="org.assertj" name="assertj-core"/>
         <!-- ✅ Signed by Rafael Winterhalter - ByteBuddy -->
         <trusted-key id="A7892505CF1A58076453E52D7999BEFBA1039E8B" group="net.bytebuddy" name="byte-buddy"/>


         <!-- CODE DOCUMENTATION - Asciidoctor Gradle Plugin with transitive dependencies -->
         <!-- ✅ Signed by Schalk W. Cronjé - ysb33r -->
         <trusted-key id="EA022560A81E5BD48DB3D18B54AC8E2D98CFEAC6" group="org.ysb33r.gradle"/>
         <!-- ✅ Signed by Robert Panzer - AsciidoctorJ -->
         <trusted-key id="AD296CA014321485EB6780FF8B8E0CB0F6A7657E" group="org.asciidoctor"/>
         <!-- ✅ Signed by Lasse Collin - Tukaani -->
         <trusted-key id="3690C240CE51B4670D30AD1C38EE757D69184620" group="org.tukaani" name="xz"/>


         <!-- CODE FORMATTING - Spotless Gradle Plugin with transitive dependencies -->
         <!-- ✅ Signed by DiffPlug LLC -->
         <trusted-key id="A31DDE881C3E3C4C985BD0D02C7F998F4272C851" group="com.diffplug.spotless"/>
         <!-- ✅ Signed by DiffPlug LLC -->
         <trusted-key id="4797B4F5DCC46CEA61059071A1AE06236CA2BA62" group="com.diffplug.durian"/>
         <!-- ✅ Signed by JetBrains -->
         <trusted-key id="6F538074CCEBF35F28AF9B066A0975F8B1127B83" group="org.jetbrains.kotlin"/>
         <!-- ✅ Signed by Square (squareup.com) -->
         <trusted-key id="DBD744ACE7ADE6AA50DD591F66B50994442D2D40">
            <trusting group="com.squareup.okhttp3"/>
            <trusting group="com.squareup.okio"/>
         </trusted-key>
         <!-- ✅ Signed by Matthias Sohn - JGit -->
         <trusted-key id="7C669810892CBD3148FA92995B05CCDE140C2876" group="org.eclipse.jgit" name="org.eclipse.jgit"/>
         <!-- ✅ Signed by Niall Gallagher - concurrent-trees -->
         <trusted-key id="A9789342F598AD5B1175EF357EB97D110DFADD60" group="com.googlecode.concurrent-trees" name="concurrent-trees"/>
         <!-- ✅ Signed by JetBrains -->
         <trusted-key id="2E3A1AFFE42B5F53AF19F780BCF4173966770193" group="org.jetbrains" name="annotations"/>
         <!-- 🤔 Signed by Sebastian Sampaoli <ssampaoli@equo.dev> -->
         <trusted-key id="1D2C7EF8ADA0F794B58C7C63436902AF59EDF60E" group="dev.equo.ide" name="solstice"/>
         <!-- 🤔 Signed by ??? -->
         <trusted-key id="9E3044071B758EBCB7E45673700E4F39BC05364B" group="org.eclipse.platform" name="org.eclipse.osgi"/>
         <!-- 🤔 Signed by Bintray/JFrog -->
         <trusted-key id="8756C4F765C9AC3CB6B85D62379CE192D401AB61">
            <trusting group="org.jetbrains.intellij.deps"/>
            <trusting group="com.diffplug.durian"/>
         </trusted-key>


         <!-- CODE FORMATTING - Palantir Java formatter with transitive dependencies -->
         <!-- ✅ Signed by Palantir -->
         <trusted-key id="1D9866E375A1435ACE0BE0ADE3461D2D16725F94" group="com.palantir.javaformat"/>
         <!-- ✅ Signed by Tatu Saloranta - Jackson -->
         <trusted-key id="28118C070CB22A0175A2E8D43D12CA2AC19F3181">
            <trusting group="com.fasterxml.jackson.core"/>
            <trusting group="com.fasterxml.jackson.datatype"/>
            <trusting group="com.fasterxml.jackson.module"/>
         </trusted-key>
         <!-- ✅ Signed by Christopher Povirk - Guava -->
         <trusted-key id="BDB5FA4FE719D787FB3D3197F6D4A1D411E9D1AE" group="com.google.guava" name="guava"/>
         <!-- ✅ Jean-Baptiste Giraudeau - Functional Java -->
         <trusted-key id="3448B9AECE73A41DC11FEE9ADDF3944950267CD1" group="org.functionaljava" name="functionaljava"/>


         <!-- CODE FORMATTING - ktfmt with transitive dependencies -->
         <!-- ✅ Signed by Ktfmt Team -->
         <trusted-key id="648190996EC0930A6D7D49A978178478013521D0" group="com.facebook" name="ktfmt"/>
         <!-- ✅ Signed by Liam Miller-Cushon (Error Prone releases) -->
         <trusted-key id="EE0CA873074092F806F59B65D364ABAA39A47320" group="com.google.googlejavaformat" name="google-java-format"/>
         <!-- ✅ Signed by Timothy Wall - Java Native Access (JNA) -->
         <trusted-key id="78DA3333F653B1C54A938BE24DB7BC57DFDBCEA4" group="net.java.dev.jna" name="jna"/>
      </trusted-keys>
   </configuration>
   <components>
      <component group="org.asciidoctor" name="asciidoctor-gradle-base" version="4.0.5">
         <artifact name="asciidoctor-gradle-base-4.0.5.jar">
            <md5 value="64435768c6cb3a803af61ea632f0bd93" origin="Downloaded the file from https://plugins.gradle.org/m2/org/asciidoctor/asciidoctor-gradle-base/4.0.5 and generated the checksum locally" reason="Artifact is not signed"/>
         </artifact>
      </component>
      <component group="org.asciidoctor" name="asciidoctor-gradle-jvm" version="4.0.5">
         <artifact name="asciidoctor-gradle-jvm-4.0.5.jar">
            <md5 value="46c3fea67502a15834e020f185775c60" origin="Downloaded the file from https://plugins.gradle.org/m2/org/asciidoctor/asciidoctor-gradle-jvm/4.0.5 and generated the checksum locally" reason="Artifact is not signed"/>
         </artifact>
      </component>
   </components>
</verification-metadata>