tag | cbf62f1cbf40d640821bcb699a81c45111cb590d | |
---|---|---|
tagger | Matthias Sohn <matthias.sohn@sap.com> | Tue May 23 10:48:07 2023 +0200 |
object | 28d94eeedcd0bfffde5a33b4c99b02bfabdaedf5 |
v0.3.0 Adds pgp signing third party dependencies which aren't jar signed.
commit | 28d94eeedcd0bfffde5a33b4c99b02bfabdaedf5 | [log] [tgz] |
---|---|---|
author | Matthias Sohn <matthias.sohn@sap.com> | Mon May 22 17:19:15 2023 +0200 |
committer | Thomas Wolf <twolf@apache.org> | Mon May 22 22:25:21 2023 +0200 |
tree | f05898fd5aaa33be6d6cd4ac08eab77fbc3fc5b6 | |
parent | 9397f5fded6560811abc1946de5785f626811232 [diff] |
Add pgp signing for bundles used directly from Maven Central See [1] and [2] for the GPG setup and tycho-gpg-plugin configuration. We do not pass the keyring passphrase on the maven command-line to ensure it is never written to any build log. Instead, configure the tycho-gpg-plugin to use <configuration> <passphrase>${env.EGIT_KEYRING_PASSPHRASE}</passphrase> ... </configuration> Also use temurin-jdk17-latest to run the build; it's required by Tycho 4.0.x, which in turn is needed to force signing of the BouncyCastle bundles. [1] https://docs.google.com/document/d/1MnDBvOUwKvKacB-QKnH_PzK88dUlHkjs-D-DWEKmvkY [2] https://gitlab.eclipse.org/eclipsefdn/helpdesk/-/issues/3078 Change-Id: Iabd45f8e6fb03cb61d86650058a6ac08645500d7
This repository contains the EGit Jenkins pipeline library.
For general information about Jenkins pipeline shared libraries see the Jenkins documentation.
Jenkins pipelines are written in Groovy; for development in Eclipse it may help to install the Groovy Development Tools. Be aware, though, that GDT patches the JDT Java compiler; a particular version of GDT thus works only with a particular version of JDT. If you use an Eclipse I-build (nightly development build for the next release), GDT will fail to install.
The library is intended to be used for the Jenkins builds of the egit/egit and the egit/egit-github repositories.
It provides several kinds of general pipelines that can be configured:
verifyBuild
is a simple pipeline that builds and runs the tests for a Gerrit patch set.productBuild
is intended to be run when a Gerrit patch set is submitted and builds a full distribution (nightly or stable build).uiNode
encapsulates the general Jenkins slave setup to run a build including UI tests on a JIRO node.
Directory src
contains auxiliary Groovy classes encapsulating generally useful operations.
The content of this repository is licensed under the EPL 2.0.
SPDX-License-Identifier: EPL-2.0