You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
While JFrog Artifactory automatically handles SHA-256, SHA-1, and MD5 checksums, providing SHA-512 checksums can offer enhanced security, but I am not sure if we should upload separate files as Gradle does, instead of storing the checksum as Artifactory metadata, just like with the other checksum types.
Describe the bug
I am currently using gradle publish to publish files to Artifactory
./gradlew --refresh-dependencies publish -i -s --no-watch-fs
Example project uploads the following files
basic-java-1.0.0-SNAPSHOT.jar
basic-java-1.0.0-SNAPSHOT.jar.sha512
basic-java-1.0.0-SNAPSHOT.module
basic-java-1.0.0-SNAPSHOT.module.sha512
basic-java-1.0.0-SNAPSHOT.pom
basic-java-1.0.0-SNAPSHOT.pom.sha512
Moving to Artifactory publish to include build properties. When I publish with artifactoryPublish the checksum files are missing.
./gradlew --refresh-dependencies artifactoryPublish -i -s --no-watch-fs
basic-java-1.0.0-SNAPSHOT.jar
basic-java-1.0.0-SNAPSHOT.module
basic-java-1.0.0-SNAPSHOT.pom
To Reproduce
Expected behavior
Artifactory publications should be producing the same files. Or maybe I am missing something
Screenshots
If applicable, add screenshots to help explain your problem.
Versions
Additional context
Add any other context about the problem here.
The text was updated successfully, but these errors were encountered: