[MGPG-130] Update sigstore extension to ".sigstore.json" (original) (raw)
Details
- Type:
Sub-task
- Status: Closed
- Priority:
Major - Resolution: Fixed
- Affects Version/s: None
- Fix Version/s: 3.2.5
- Labels:
None
Description
Sigstore uses ".sigstore.json" extensions for all newer versions of the clients (maven, gradle, other languages).
An update to https://github.com/apache/maven-gpg-plugin/blob/master/src/main/java/org/apache/maven/plugins/gpg/FilesCollector.java#L44-L45 should be sufficient.
Attachments
Issue Links
relates to
MRESOLVER-680 Disable checksum by default for .sigstore.json as well
- Closed
links to