nicoulaj/checksum-maven-plugin

artifacts mojo: only generate checksum for specific (attached) artifacts

kwin opened this issue · 2 comments

kwin commented

Currently the artifacts mojo generates checksums for all attached artifacts (

). It should be possible to include only specific attached artifacts by classifier.

My use case: Don't generate checksum for attached buildinfo artifacts (https://github.com/apache/maven-artifact-plugin).
Also e.g. the ASF policy only requires SHA512 checksums for source artifacts (https://github.com/apache/maven-apache-parent/blob/01d812b4e78c1661ad61b1d1befcccbed2cc3e3f/pom.xml#L368) with classifier source-release. All other attached artifacts (even the main ones) don't necessarily need to have anything apart from the default MD5/SHA1 generated by Maven itself (https://infra.apache.org/release-distribution.html#sigs-and-sums).

kwin commented

Using the mojo file or files is no feasible workaround as this will never attach the checksums with a classifier.