4.0.0 io.github.chains-project maven-lockfile-parent 3.1.2 pom maven-lockfile-parent This plugin is a state-of-the-art solution that can be used to validate the integrity of a maven repository. It does this by generating a lock file that contains the checksums of all the artifacts in the repository. The lock file can then be used to validate the integrity of the repository. This guards the supply chain against malicious actors that might tamper with the artifacts in the repository. https://github.com/chains-project/maven-lockfile 2023 MIT https://opensource.org/licenses/MIT repo MartinWitt Martin Wittlinger maven_plugin github_action scm:git:https://github.com/chains-project/maven-lockfile scm:git:https://github.com/chains-project/maven-lockfile.git https://github.com/chains-project/maven-lockfile.git 2023-06-14T13:04:43Z org.cyclonedx cyclonedx-maven-plugin 2.7.9 true ${project.build.directory}/staging-deploy makeAggregateBom package org.apache.maven.plugins maven-artifact-plugin 3.4.1 com.diffplug.spotless spotless-maven-plugin 2.37.0 .gitignore false true 4 pom.xml org.apache.maven.plugins maven-deploy-plugin 3.1.1 org.codehaus.gmavenplus gmavenplus-plugin 3.0.0 false org.apache.groovy groovy 4.0.12 runtime execute generate-resources org.apache.maven.plugins maven-resources-plugin 3.3.1 ${project.basedir} ./template/ README.md action.yml true UTF-8 org.apache.maven.plugins maven-compiler-plugin 3.11.0