Error signing artifact /Users/m/w/projects/finos-parent-pom/target/finos-5-SNAPSHOT.pom.: java.net.SocketException: No such file or directory; errno=2

[maoo]

Description

When trying to use the sigstore-maven-plugin I get java.net.SocketException: No such file or directory, referring to the .pom file; it seems that there is a trailing . char, which shouldn't probably be there. You can find the full log on https://github.com/finos/finos-parent-pom/issues/9#issuecomment-1164151349

Before digging into the plugin code, I was wondering if anyone have already experienced this issue. Please let me know if you need more info; thanks in advance!

Version

• sigstore-maven-plugin:0.0.17
• Apache Maven 3.8.4 (9b656c72d54e5bacbed989b64718c159fe39b537)
• Java version: 17.0.2, vendor: Homebrew, runtime: /usr/local/Cellar/openjdk/17.0.2/libexec/openjdk.jdk/Contents/Home

Steps to reproduce

git clone git@github.com:finos/finos-parent-pom.git
cd finos-parent-pom
mvn deploy -Psigstore-release -DrepoServerHost=oss.sonatype.org

[Rogier718]

How do I install the maven plugin?

[maoo]

How do I install the maven plugin?

Hi @Rogier718 - I don't think that your question is relevant to this issue, but I'll try to help you out. I'd suggest to read the following, in this order:

• https://www.csoonline.com/article/3662782/sigstore-explained-how-it-helps-secure-the-software-supply-chain.html
• https://blog.sonatype.com/maven-central-and-sigstore
• https://github.com/sigstore/sigstore-maven

For further questions, please open a new issue, as this one aims to answer a different question. Hope this helps!

[maoo]

Any update on this?

I tried to read the code, but I couldn't find anything obvious. Did anyone encounter this issue?