apache / apache/maven-gpg-plugin
[MGPG-82] Use --multifile once gpg supports it with --detach-sign
- Dominant language
- Java
- Stars
- 31
- Forks
- 27
- Avg merge
- 4h 44m
- Merged PRs (30d)
- 4
Description
**[Peter Palaga](https://issues.apache.org/jira/secure/ViewProfile.jspa?name=ppalaga)** opened **[MGPG-82](https://issues.apache.org/jira/browse/MGPG-82?redirect=false)** and commented
maven-gpg-plugin currently spawns a new process for signing each file. This causes quite a big overhead when releasing big projects with hundreds of artifacts to sign. I asked for the `--multifile --detach-sign` support on https://dev.gnupg.org/T4930
---
No further details from [MGPG-82](https://issues.apache.org/jira/browse/MGPG-82?redirect=false)
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by checking the linked GnuPG T4930 request to confirm whether --multifile with --detach-sign is supported. Then inspect how the Maven GPG Plugin currently launches signing processes and determine the compatibility path. Done means large releases can sign multiple artifacts with the supported multifile mode without changing signing results.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- build-system
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100