Matthew Fremont

I've encountered this bug when running a client that has a transitive dependency on `org.apache.bookkeeper::circe-checksum` and built with Gradle. When run in a Docker container that has a base image...

Thanks for the feedback. My initial investigation included considering deployment keys, but, as @staticfloat mentioned, that appears to require using the git CLI or Libgit2, and I did not see...

@StefanKarpinski are you suggesting that we add a boolean to `RegistryMeta` to disable verification for that registry only so that a package server for a private registry can disable checks...