java - Lock dependencies by secure checksum in Maven -

-

when distribute source project pom can define dependencies version strings. build download dependencies if not in local repository, verify checksums of downloaded files metadata same repository (-c).

however build download dependencies number of public repositories (and proxies) , users @ mercy of public services if return unmodified files.

i have way record checksums of build dependencies , ship them pom (so sure files unaltered dont need ship copy of local repository builders).

is there maven way this? similiar that, there easy way archive dependencies (copy of local repository used artifacts , metadata files) can repeat build when central repositories fail or ship them offline customers?

(both without need repository proxy if possible. know can build that, wonder if there infrastructure in maven already. maybe shipping local repository contain metadata files or similiar?)

nb: not looking createchecksum on generated artifacts, on locking checksums of used dependencies. found maven-create-checksums plugin, no corresponding verifyer.

there bitcoinjenforcerrules, appears plugin maven's enforcer plugin (that's right it's plugin plugin). works similar gradle-witness, means compares checksum of (hopefully) all used artifact dependencies list have created.

while it's better nothing, ideal solution if 1 set checksum (or openpg key used sign pom in case it's snapshot artifact) pom of direct dependencies, , pom of dependencies contain checksum of it's artifacts, , checksum (/openpg key, if snapshot) of pom of direct dependencies, , on. note if checksums used, should tied particular maven repository, since same (non-changing, i.e. non-snapshot) artifact may have different checksums in different repositories.


Comments

Post a Comment

Popular posts from this blog

android - getbluetoothservice() called with no bluetoothmanagercallback -

-
i getting getbluetoothservice() called no bluetoothmanagercallback error in android application. i have no idea causing or bluetooth manager callbacks. can give me idea of causing problem or start looking. by reading android source code, seems warning cannot about. source code shows if call bluetoothsocket#connect(); then call bluetoothadapter.getdefaultadapter().getbluetoothservice(null); the key here, null parameter passes in above line. due this, there no callback, , bluetoothsocket class throw out warning. since warning, not think need it. https://android.googlesource.com/platform/frameworks/base/+/master/core/java/android/bluetooth/bluetoothsocket.java line 306 https://android.googlesource.com/platform/frameworks/base/+/master/core/java/android/bluetooth/bluetoothadapter.java line 1610
Read more

sql - ASP.NET SqlDataSource, like on SelectCommand -

-
i'm working on asp.net. have sqldatasource query hardcoded on selectcommand: <asp:sqldatasource id="datasource1" runat="server" cancelselectonnullparameter="false" connectionstring="<%$ connectionstrings:s.properties.settings.connectionstring %>" selectcommand="select * [table] ([col1] case @col1_param when null col1 else @col1_param end) , ([col2] case @col2_param when null col2 else @col2_param end)" selectcommandtype="text"> <selectparameters> <asp:controlparameter controlid="textbox1" name="col1_param" propertyname="text" type="string" /> <asp:controlparameter controlid="textbox2" name="col2_param" propertyname="text" type="string" /> </selectparameters> what want if enter data on 1 textbox only, data display according textbox
Read more

ios - Undefined symbols for architecture armv7: "_OBJC_CLASS_$_SSZipArchive" -

-
i try using extractzipfile plugin @ this: https://github.com/phonegap/phonegap-plugins/tree/master/ios/extractzipfile but when compiler xcode 4.6.1 in sdk 6.1 throws error: undefined symbols architecture i386: "_objc_class_$_ssziparchive", referenced from: objc-class-ref in extractzipfileplugin.o ld: symbol(s) not found architecture i386 clang: error: linker command failed exit code 1 (use -v see invocation) i try issue @ here: undefined symbols architecture armv7 ssziparchive but shows error: /users/alienware/desktop/extractzipfile/ssziparchive/tests/ssziparchivetests.m:10:9: 'sentestingkit/sentestingkit.h' file not found i work phonegap , make app in ios, dump. update : try add ssziparchive.m compiler source , come new error: undefined symbols architecture i386: "_unzclose", referenced from: +[ssziparchive unzipfileatpath:todestination:overwrite:password:error:delegate:] in ssziparchive.o "_unzclosecurrentfil
Read more