Verify PGP signatures plugin – Plugin Documentation

Plugin Documentation

Goals available for this plugin:

Goal	Description
pgpverify:check	Check OpenPGP signature of all project and plugins dependencies.
pgpverify:go-offline	Resolve OpenPGP signature and keys of all project and plugins dependencies. Verification of signature in this goal will not occurs. In case of any problem only warn will be reported.
pgpverify:help	Display help information on pgpverify-maven-plugin. Call `mvn pgpverify:help -Ddetail=true -Dgoal=<goal-name>` to display parameter details.
pgpverify:show	Show information about artifact signature.

System Requirements

The following specifies the minimum requirements to run this Maven plugin:

Maven	3.5.0
JDK	1.8

Usage

You should specify the version in your project's plugin configuration:

<project>
  ...
  <build>
    <!-- To define the plugin version in your parent POM -->
    <pluginManagement>
      <plugins>
        <plugin>
          <groupId>org.simplify4u.plugins</groupId>
          <artifactId>pgpverify-maven-plugin</artifactId>
          <version>1.17.0</version>
        </plugin>
        ...
      </plugins>
    </pluginManagement>
    <!-- To use the plugin goals in your POM or parent POM -->
    <plugins>
      <plugin>
        <groupId>org.simplify4u.plugins</groupId>
        <artifactId>pgpverify-maven-plugin</artifactId>
      </plugin>
      ...
    </plugins>
  </build>
  ...
</project>

For more information, see "Guide to Configuring Plug-ins"