artifacts mojo: only generate checksum for specific (attached) artifacts
kwin opened this issue · 2 comments
Currently the artifacts
mojo generates checksums for all attached artifacts (
My use case: Don't generate checksum for attached buildinfo
artifacts (https://github.com/apache/maven-artifact-plugin).
Also e.g. the ASF policy only requires SHA512 checksums for source artifacts (https://github.com/apache/maven-apache-parent/blob/01d812b4e78c1661ad61b1d1befcccbed2cc3e3f/pom.xml#L368) with classifier source-release
. All other attached artifacts (even the main ones) don't necessarily need to have anything apart from the default MD5/SHA1 generated by Maven itself (https://infra.apache.org/release-distribution.html#sigs-and-sums).
One could offer an additional parameter https://maven.apache.org/shared/maven-common-artifact-filters/apidocs/org/apache/maven/shared/artifact/filter/collection/ClassifierFilter.html, to allow both includes and excludes.
Using the mojo file
or files
is no feasible workaround as this will never attach the checksums with a classifier.