search

signalapp / gradle-witness

A gradle plugin that enables static verification for remote dependencies.
MIT License
228 stars 60 forks source link

Sort calculated checksum #34

Open blabno opened 4 years ago

blabno commented 4 years ago

When I add new dependency to my project and run calculateChecksums Then git diff should show me minimal differences.

This can be achieved if dependencies are sorted by groupId and artifactName;

https://github.com/signalapp/gradle-witness/blob/master/src/main/groovy/org/whispersystems/witness/WitnessPlugin.groovy#L56