Clone Tools
  • last updated a few seconds ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
Split the `signing` module

This commit splits the `signing` module into another `security`

project so that we can reuse some code for dependency verification.

It's worth noting that some of the classes had to remain in the `plugins`

package because they were public APIs.

Further effort to split them out may be done later.

    • -0
    • +40
    ./ConfigurableSignatoryProvider.java
    • -33
    • +8
    ./gnupg/GnupgSignatoryProvider.java
    • -85
    • +10
    ./pgp/InMemoryPgpSignatoryProvider.java
  1. … 67 more files in changeset.
Split the `signing` module

This commit splits the `signing` module into another `security`

project so that we can reuse some code for dependency verification.

It's worth noting that some of the classes had to remain in the `plugins`

package because they were public APIs.

Further effort to split them out may be done later.

    • -0
    • +40
    ./ConfigurableSignatoryProvider.java
    • -33
    • +8
    ./gnupg/GnupgSignatoryProvider.java
    • -85
    • +10
    ./pgp/InMemoryPgpSignatoryProvider.java
  1. … 67 more files in changeset.
De-incubate signing pre-5.0

  1. … 3 more files in changeset.
Supporting in-memory signing subkeys Issue: #10363

Signed-off-by: Sergey Zhemzhitsky <szhemzhitski@gmail.com>

    • -9
    • +42
    ./pgp/InMemoryPgpSignatoryProvider.java
  1. … 2 more files in changeset.
Apply `Anonymous type can be replaced with lambda` inspection the whole project

  1. … 666 more files in changeset.
Apply `Explicit type can be replaced with <>` inspection the whole project

  1. … 908 more files in changeset.
Organize imports

  1. … 339 more files in changeset.
Replace anonymous classes with lambdas

  1. … 711 more files in changeset.
Replace anonymous classes with lambdas

  1. … 695 more files in changeset.
Remove synthetic accessors for internal private symbol references

    • -1
    • +1
    ./pgp/InMemoryPgpSignatoryProvider.java
  1. … 900 more files in changeset.
Remove synthetic accessors for internal private symbol references

    • -1
    • +1
    ./pgp/InMemoryPgpSignatoryProvider.java
  1. … 900 more files in changeset.
Remove synthetic accessors for internal private symbol references

    • -1
    • +1
    ./pgp/InMemoryPgpSignatoryProvider.java
  1. … 888 more files in changeset.
Remove synthetic accessors for internal private symbol references

    • -1
    • +1
    ./pgp/InMemoryPgpSignatoryProvider.java
  1. … 895 more files in changeset.
Remove synthetic accessors for internal private symbol references

    • -1
    • +1
    ./pgp/InMemoryPgpSignatoryProvider.java
  1. … 900 more files in changeset.
Remove synthetic accessors for internal private symbol references

    • -1
    • +1
    ./pgp/InMemoryPgpSignatoryProvider.java
  1. … 900 more files in changeset.
WIP

    • -0
    • +103
    ./pgp/InMemoryPgpSignatoryProvider.java
  1. … 13 more files in changeset.
Introduce SigningExtension.useInMemoryPgpKeys()

This commit adds an alternative signatory provider that works with

ascii-armored in-memory PGP keys instead of keyring files. This is often

easier to setup on CI servers and more secure because there never is a

persistent file that contains the secret key. The user manual is updated

with a sample that demonstrates how to pass key and password using

environment variables.

    • -0
    • +103
    ./pgp/InMemoryPgpSignatoryProvider.java
  1. … 13 more files in changeset.
Introduce SigningExtension.useInMemoryPgpKeys()

This commit adds an alternative signatory provider that works with

ascii-armored in-memory PGP keys instead of keyring files. This is often

easier to setup on CI servers and more secure because there never is a

persistent file that contains the secret key. The user manual is updated

with a sample that demonstrates how to pass key and password using

environment variables.

    • -0
    • +103
    ./pgp/InMemoryPgpSignatoryProvider.java
  1. … 10 more files in changeset.
Internalize gnupg classes

Signed-off-by: Bo Zhang <bo@gradle.com>

    • -0
    • +96
    ./gnupg/GnupgSettings.java
    • -0
    • +120
    ./gnupg/GnupgSignatory.java
    • -0
    • +73
    ./gnupg/GnupgSignatoryFactory.java
    • -0
    • +73
    ./gnupg/GnupgSignatoryProvider.java
    • -0
    • +20
    ./gnupg/package-info.java
  1. … 7 more files in changeset.