search

slipset / deps-deploy

deploy your stuff
Eclipse Public License 1.0
148 stars 31 forks source link

Add support for signing jars #3

Closed SevereOverfl0w closed 5 years ago

SevereOverfl0w commented 5 years ago

Boot's jar task supports --gpg-sign & family to provide signing of jars before uploading. This is an important feature: https://malcolmsparks.com/posts/library-distribution.html .

I can't find any technical details for this, but copying lein/boot's source is a good place to start.

I believe it is worth making a default you turn off.

arichiardi commented 5 years ago

Agree this is a good thing to do, lein has it configurable as well.