sigstore / sigstore-java

java clients for sigstore
Apache License 2.0
36 stars 20 forks source link

Add buildinfo at compile time #728

Closed loosebazooka closed 1 month ago

loosebazooka commented 1 month ago

Injects build info, which appears to be somewhat more portable that reading the jar manifest?

vlsi commented 1 month ago

Ideally, there should be a dependency from compileJava on generateBuildInfo so we know the file is properly generated before compile.

loosebazooka commented 1 month ago

Ideally, there should be a dependency from compileJava on generateBuildInfo so we know the file is properly generated before compile.

I believe this is implicit with the sourceSet

$ ~/src/sigstore-java$ ./gradlew sigstore-java:compileJava --dry-run
:sigstore-java:generateBuildInfo SKIPPED
:sigstore-java:extractProto SKIPPED
:sigstore-java:processResources SKIPPED
:sigstore-java:extractTestProto SKIPPED
:sigstore-java:processTestResources SKIPPED
:sigstore-java:generateJsonSchema2DataClassConfigRekor SKIPPED
:sigstore-java:generateJsonSchema2DataClass SKIPPED
:sigstore-java:extractIncludeProto SKIPPED
:sigstore-java:generateProto SKIPPED
:sigstore-java:compileJava SKIPPED