Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Backport trusting only full GPG keys in dependency verification [Backport 7.6.1] #23910

Closed
ljacomet opened this issue Feb 15, 2023 · 1 comment · Fixed by #23911
Closed

Backport trusting only full GPG keys in dependency verification [Backport 7.6.1] #23910

ljacomet opened this issue Feb 15, 2023 · 1 comment · Fixed by #23911
Assignees
@ljacomet
Labels
a:bug in:dependency-verification trustkey truststore checksum signature
Milestone
7.6.1

Comments

@ljacomet
Copy link
Member

ljacomet commented Feb 15, 2023 •
edited

Backport #23667
@ljacomet ljacomet added a:bug in:dependency-verification trustkey truststore checksum signature labels Feb 15, 2023
@ljacomet ljacomet added this to the 7.6.1 milestone Feb 15, 2023
@ljacomet ljacomet self-assigned this Feb 15, 2023
@ljacomet ljacomet mentioned this issue Feb 15, 2023
Merged
@ljacomet ljacomet linked a pull request Feb 15, 2023 that will close this issue
Trusted GPG-key should only accept 160-bit fingerprints #23911
Merged
ljacomet pushed a commit that referenced this issue Feb 17, 2023
@hegyibalint @ljacomet
Trusted GPG-key should only accept 160-bit fingerprints
cd9779f 
Backport from #23667 to 7.6.1

Fixes #23910
bot-gradle added a commit that referenced this issue Feb 22, 2023
@bot-gradle @hegyibalint
Merge pull request #23911 Trusted GPG-key should only accept 160-bit …
bc3da47 
…fingerprints

Backport from #23667 to 7.6.1

Fixes #23910

Co-authored-by: Balint Hegyi <bhegyi@gradle.com>
@ljacomet
Copy link
Member Author

Changes have been merged

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@ljacomet ljacomet

Labels
a:bug in:dependency-verification trustkey truststore checksum signature
Projects
None yet
Milestone
7.6.1
Development

Successfully merging a pull request may close this issue.

Trusted GPG-key should only accept 160-bit fingerprints gradle/gradle
1 participant
@ljacomet