Philipp Ottlinger created RAT-534:
-------------------------------------

             Summary: Improve release verification and digest creation
                 Key: RAT-534
                 URL: https://issues.apache.org/jira/browse/RAT-534
             Project: Apache RAT
          Issue Type: Task
          Components: build
    Affects Versions: 0.18
            Reporter: Philipp Ottlinger


During release vote of 0.18 [~claude] pointed to 
https://apache.org/info/verification.html
and mentioned that SHA-256 and SHA-512 should be created during the release 
build
(in <=0.18 the checksums were generated manually before uploading to ASF dist 
area).

Over at Maven
https://github.com/apache/maven/blob/master/apache-maven/pom.xml#L376
https://github.com/nicoulaj/checksum-maven-plugin/tree/master
is used to automate this part of releases.

Evaluate and integrate into RAT.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to