cstamas commented on PR #432:
URL: https://github.com/apache/maven-resolver/pull/432#issuecomment-1962431110

   @slawekjaranowski general remark:
   * spi defined ArtifactGenerators
   * generator-signer hooks into this, and define Signers
   * gpg is one Signer implementation
   
   But also:
   * there may be multiple generators, see how they are ordered, and the idea 
is that "signer generator" is last, and it should sign all the deployed but 
also "so far generated" artifacts.
   * gpg may not be the only one signer either
   * moreover, a signer may sign differently than gpp. Gpg signs each file, but 
another signer may provide one signature for all "relevant" artifacts.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Reply via email to