Open sventorben opened 5 years ago
We had a few requests for this and maybe we should just get around to finally do it ;) I'll see if I get the chance to release it this week.
Hi folks ! +1 for this demand. Would be great because I like this SPI ! Thanks !
Any updates on this? My team inside Salesforce would really like to integrate with this SPI.
Is there an update on releasing this to Maven Central?
Is there any chance to have this implemented soon? I've seen that there is a recent pull request for a maven build. We would really like to further automate our pipelines and this would be of great benefit for the usage of this SPI!
@dbubenheim the Maven build PR is merged now.
@pb82 That's really great news! Thanks a lot for your quick response and the work on this topic. So based on the Maven build, are you planning to release to maven central (or any other public repository) then?
@pb82, can I chase for info on when there might be a release so that we can get to test things out?
Publishing to maven central means that hashes can be validated, provenance tracked, etc. All required to follow modern standards for secure software supply chain management. eg, see NIST Special Publication 800-218 (Secure Software Development Framework (SSDF) Version 1.1).
Any update on the progress?
I couldn't find the artifact in Maven Central, is it published to some other repository?
UP Actual for me too :)
Any plans to implement this? Would be great for us as well.
Would be great if you could release JARs to Maven Central. Any plans to do so?