[
https://issues.apache.org/jira/browse/MRESOLVER-301?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17820383#comment-17820383
]
ASF GitHub Bot commented on MRESOLVER-301:
------------------------------------------
cstamas commented on PR #432:
URL: https://github.com/apache/maven-resolver/pull/432#issuecomment-1962431110
@slawekjaranowski general remark:
* spi defined ArtifactGenerators
* generator-signer hooks into this, and define Signers
* gpg is one Signer implementation
But also:
* there may be multiple generators, see how they are ordered, and the idea
is that "signer generator" is last, and it should sign all the deployed but
also "so far generated" artifacts.
* gpg may not be the only one signer either
* moreover, a signer may sign differently than gpp. Gpg signs each file, but
another signer may provide one signature for all "relevant" artifacts.
> Artifact Generators
> -------------------
>
> Key: MRESOLVER-301
> URL: https://issues.apache.org/jira/browse/MRESOLVER-301
> Project: Maven Resolver
> Issue Type: New Feature
> Components: Resolver
> Reporter: Tamas Cservenak
> Assignee: Tamas Cservenak
> Priority: Major
> Fix For: 2.0.0, 2.0.0-alpha-9
>
>
> Resolver should provide extension point for "generators". Typical use case
> for these are for example "signing" of artifacts.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
