gautamworah96 commented on a change in pull request #108:
URL: https://github.com/apache/lucene/pull/108#discussion_r622691393



##########
File path: gradle/verification-metadata.xml
##########
@@ -0,0 +1,2198 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<verification-metadata 
xmlns="https://schema.gradle.org/dependency-verification"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; 
xsi:schemaLocation="https://schema.gradle.org/dependency-verification 
https://schema.gradle.org/dependency-verification/dependency-verification-1.0.xsd";>
+   <configuration>
+      <verify-metadata>true</verify-metadata>
+      <verify-signatures>false</verify-signatures>
+   </configuration>
+   <components>
+      <component group="com.beust" name="jcommander" version="1.78">
+         <artifact name="jcommander-1.78.jar">
+            <sha256 
value="7891debb84b5f83e9bd57593ebece3399abbe0fd938cf306b3534c57913b9615" 
origin="Generated by Gradle"/>
+         </artifact>
+         <artifact name="jcommander-1.78.pom">
+            <sha256 
value="6fee231c0aeee6de1256b6b5590ce9e6f6cf6c39797ed668573520bc3412e2a7" 
origin="Generated by Gradle"/>
+         </artifact>
+      </component>
+      <component group="com.carrotsearch" name="hppc" version="0.8.2">
+         <artifact name="hppc-0.8.2.jar">
+            <sha256 
value="97e45d4e0106d98dd3e76d9610e0bd3895409bd1ab1ed189855b05af0571025e" 
origin="Generated by Gradle"/>
+         </artifact>
+         <artifact name="hppc-0.8.2.pom">
+            <sha256 
value="dd84d3247b2bbdfea08f40e896f6d12aa5c3f2ec4982dcbf82b51efb8330a654" 
origin="Generated by Gradle"/>
+         </artifact>
+      </component>
+      <component group="com.carrotsearch" name="hppc-parent" version="0.8.2">
+         <artifact name="hppc-parent-0.8.2.pom">
+            <sha256 
value="9af29845f5120dfd526d12d36d3eeaff045e8d85a826fca8039f830398df534f" 
origin="Generated by Gradle"/>
+         </artifact>
+      </component>
+      <component group="com.carrotsearch.randomizedtesting" 
name="randomizedtesting-parent" version="2.7.2">
+         <artifact name="randomizedtesting-parent-2.7.2.pom">
+            <sha256 
value="43a0795f51c694dbfc7acf9430c96c867553d38fc44664649ffad68247046c57" 
origin="Generated by Gradle"/>
+         </artifact>
+      </component>
+      <component group="com.carrotsearch.randomizedtesting" 
name="randomizedtesting-parent" version="2.7.6">
+         <artifact name="randomizedtesting-parent-2.7.6.pom">
+            <sha256 
value="4053e097749859df0955bcca1284ccf993e3dba23f9504236892081aab41079b" 
origin="Generated by Gradle"/>
+         </artifact>
+      </component>
+      <component group="com.carrotsearch.randomizedtesting" 
name="randomizedtesting-runner" version="2.7.2">
+         <artifact name="randomizedtesting-runner-2.7.2.jar">
+            <sha256 
value="2c4f36dffe3578d30d0d9ea8eff0584f8b252f3f92ffea08ef76a1ecb2ef1e94" 
origin="Generated by Gradle"/>
+         </artifact>
+         <artifact name="randomizedtesting-runner-2.7.2.pom">
+            <sha256 
value="5fbda9cb925a05d51c01b31e35c9b64bbf5bd8c1ff2d457bd7e98da521f72cc0" 
origin="Generated by Gradle"/>
+         </artifact>
+      </component>
+      <component group="com.carrotsearch.randomizedtesting" 
name="randomizedtesting-runner" version="2.7.6">
+         <artifact name="randomizedtesting-runner-2.7.6.jar">
+            <sha256 
value="7a95b60ac991630430f723485e0ddfcc7094bfe32e19816165a7443a255008a5" 
origin="Generated by Gradle"/>
+         </artifact>
+         <artifact name="randomizedtesting-runner-2.7.6.pom">
+            <sha256 
value="d845beab7418abe5167838f0c446212d8b330c33bd57ac81fa864ca20298e2c1" 
origin="Generated by Gradle"/>
+         </artifact>
+      </component>
+      <component group="com.diffplug.durian" name="durian-collect" 
version="1.2.0">

Review comment:
       Tried a few things that did not work.
   In general the docs say that,
   > In order to provide the strongest security level possible, dependency 
verification is enabled globally
   > For this purpose, Gradle provides an API which allows disabling dependency 
verification on some specific configurations.
   
   Which is the opposite of what we wanted? i.e, to enable it for just 1 
configuration?
   
   There is also a 
[way](https://docs.gradle.org/current/userguide/resolution_rules.html#sec:disabling_resolution_transitive_dependencies)
 to disable transitive resolution for a particular configuration but that too 
did not work. Needs some more tinkering...
   
   




-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@lucene.apache.org
For additional commands, e-mail: issues-h...@lucene.apache.org

Reply via email to