cstamas commented on PR #432: URL: https://github.com/apache/maven-resolver/pull/432#issuecomment-1962431110
@slawekjaranowski general remark: * spi defined ArtifactGenerators * generator-signer hooks into this, and define Signers * gpg is one Signer implementation But also: * there may be multiple generators, see how they are ordered, and the idea is that "signer generator" is last, and it should sign all the deployed but also "so far generated" artifacts. * gpg may not be the only one signer either * moreover, a signer may sign differently than gpp. Gpg signs each file, but another signer may provide one signature for all "relevant" artifacts. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
