jmeter-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Vladimir Sitnikov <sitnikov.vladi...@gmail.com>
Subject PGP-based dependency verification
Date Tue, 03 Sep 2019 10:02:27 GMT
Hi,

What do you think of https://github.com/apache/jmeter/pull/488 ?

It enables to use PGP for artifact verification, so it would simplify
dependency updates without loosing too much.

For instance, recent Jackson and Apache Tika updates could have been served
by
<trusted-key id='c9fbaa83a8753994' group='com.fasterxml.jackson.core' />
and
<trusted-key id='4a51a45b944ffd51' group='org.apache.tika' />

Vladimir

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message