gradle-witness icon indicating copy to clipboard operation
gradle-witness copied to clipboard

A gradle plugin that enables static verification for remote dependencies.

Results 24 gradle-witness issues
Sort by recently updated
recently updated
newest added

This shows the calculated hash in the error message. It should make it easier to update dependencies since you dont have to run `gradle -q calculateChecksums` to calculate the new...

I've been thinking about using Blockchain-based technology -- I'm looking at using Namecoin for a proof-of-concept implementation, but open to other ideas -- to solve the "trusting on first use"...

This pull request includes the support of different configurations that can be added to the verify process. If no additional configurations are added, the plugin still only verifies the `compile`...

This solves a problem when transitive dependencies ends up with the same name. Before this commit the following dependencies resulted in a verifcation error: Main dep: - foo-1.0.0.jar Transitive deps:...