This is an automated email from the ASF dual-hosted git repository.
hboutemy pushed a commit to branch sigstore
in repository https://gitbox.apache.org/repos/asf/maven-gpg-plugin.git
The following commit(s) were added to refs/heads/sigstore by this push:
new d39b078 add sigstore library sigstore signature details
d39b078 is described below
commit d39b0784794d902a7804bb924544116a6ca04fdd
Author: Hervé Boutemy <hbout...@sonatype.com>
AuthorDate: Fri Apr 28 14:00:52 2023 +0100
add sigstore library sigstore signature details
---
pgp-keys-map.list | 7 +++++++
1 file changed, 7 insertions(+)
diff --git a/pgp-keys-map.list b/pgp-keys-map.list
index be8f7ab..7e322a7 100644
--- a/pgp-keys-map.list
+++ b/pgp-keys-map.list
@@ -35,6 +35,13 @@ org.sonatype.plexus:plexus-sec-dispatcher =
0x2BCBDD0F23EA1CAFCC11D4860374CF2E8D
org.sonatype.sisu = 0xBA926F64CA647B6D853A38672E2010F8A7FF4A41
dev.sigstore = 0xF6B17CDEEE2BB5BB7D04667D4BE41A4907BCD034
+# sigstore signature
https://repo.maven.apache.org/maven2/dev/sigstore/sigstore-java/0.4.0/sigstore-java-0.4.0.jar.sigstore
+# decoded with https://search.sigstore.dev/?logIndex=16039467
+# Subject Alternative Name (critical):
+# email:
+# - a...@google.com
+# OIDC Issuer: https://accounts.google.com
+
com.google.http-client = 0x47504B76CF89C15C0512D9AFE16AB52D79FD224F
io.opencensus = 0x600EA202B1EC682F4A788E5AAC7A514BC9F9BB70
commons-logging:commons-logging = 0x0CC641C3A62453AB390066C4A41F13C999945293
