search

sbt / sbt-pgp

PGP plugin for sbt
Other
144 stars 56 forks source link

overload sbt update #95

Open graingert opened 8 years ago

graingert commented 8 years ago

currently it's a bit easy to accidentally load bad packages

sbt clean update check-pgp-signatures
do some stuff
sbt update # downloads bad package
sbt compile # compiles bad package into build

it would be better if update ran check-pgp-signatures

Tolsi commented 8 years ago

+1