Skip to content

Handle signing key validation without external dependencies #7

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
frankandstone wants to merge 6 commits into
base: feature/FOUND-2829-publish-to-gradle-portal
Choose a base branch
from
Open

Handle signing key validation without external dependencies #7

frankandstone wants to merge 6 commits into from

Conversation

@frankandstone
Copy link

@frankandstone frankandstone commented Nov 4, 2025

Summary

  • validate Gradle signing keys using in-script heuristics so missing armor or malformed payloads are skipped without relying on external libraries
  • update the publishing checklist to describe the adjusted validation behavior for ASCII-armored keys
  • configure plugin resolution repositories in settings to keep the Kotlin DSL build script functional

Testing

  • ./gradlew build (fails: plugin-publish plugin cannot be resolved from the Gradle Plugin Portal in this environment)

https://chatgpt.com/codex/tasks/task_b_69087a9b30088321bac20faa0e500013

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

codex

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@frankandstone