signalapp / gradle-witness

A gradle plugin that enables static verification for remote dependencies.
MIT License
229 stars 60 forks source link

Ability to exclude own libs #17

Open GeoffreyMetais opened 8 years ago

GeoffreyMetais commented 8 years ago

With a project organized with several modules, I don't want to verify my own dependencies. gradle-witness doesn't allow this.

Ram042 commented 7 years ago

This tool only verifies checksum in dependencyVerification {} block. If you don't want to verify some libraries, simply remove their's signatures from dependencyVerification {}