4.0.0 io.github.nagaratnam7891 sigstore_2.1.0 2.1.8 Sigstore Example Project A sample project demonstrating Sigstore signing for Maven Central publication https://github.com/yourusername/sigstore-example The Apache License, Version 2.0 https://www.apache.org/licenses/LICENSE-2.0.txt NagaRatnam Naga nagaratnam.ratnam@sonatype.com scm:git:git://github.com/nagaratnam7891/sigstore-example.git scm:git:ssh://github.com:nagaratnam7891/sigstore-example.git https://github.com/nagaratnam7891/sigstore-example/tree/main 1.6.0 3.3.1 11 2.1.0 11 UTF-8 3.6.3 3.7.1 1.0.0 org.codehaus.mojo flatten-maven-plugin ${flatten.maven.plugin.version} flatten process-resources flatten flatten.clean clean clean true resolveCiFriendliesOnly maven-compiler-plugin 3.12.1 ${maven.compiler.source} ${maven.compiler.target} maven-source-plugin ${maven.source.plugin.version} attach-sources jar-no-fork maven-javadoc-plugin ${maven.javadoc.plugin.version} attach-javadocs jar none net.nicoulaj.maven.plugins checksum-maven-plugin 1.11 generate-checksums package artifacts MD5 SHA-1 true maven-antrun-plugin 3.1.0 generate-pom-checksums verify run maven-gpg-plugin 3.2.7 sign-artifacts verify sign dev.sigstore sigstore-maven-plugin ${sigstore.maven.plugin.version} sigstore-sign package sign maven-assembly-plugin ${maven.assembly.plugin.version} create-central-bundle verify single src/assembly/central-bundle.xml project.artifactId-2.1.8-central-bundle false no-sign dev.sigstore sigstore-maven-plugin sigstore-sign none maven-assembly-plugin src/assembly/central-bundle-unsigned.xml