JGit: Support signing commits/tags
- Dominant language
- Java
- Stars
- 104
- Forks
- 189
- Avg merge
- 17h 46m
- Merged PRs (30d)
- 6
Description
### New feature, improvement proposal
Signing commits/tags is support in JGit but requires additional dependencies.
SSH signing is available since JGit 7.1.0 (Java 17+, https://github.com/eclipse-jgit/jgit/issues/198#issuecomment-3164363631).
GPG Signing with Bouncycastle since 5.11 (https://github.com/eclipse-jgit/jgit/commit/77848d635b76d8294697ffaf11acf51256df2a5b)
External GPG signing only available in EGit for now (https://github.com/eclipse-egit/egit/commit/2b66e9b8baa2104c320c301daea9147227ef39fe).
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by reviewing the Maven SCM code that integrates with JGit and the signing capabilities and dependency constraints listed in the issue. Determine which signing modes Maven SCM should expose and how optional dependencies would be handled. Done means commits and tags can be signed through the supported JGit paths without forcing unrelated dependencies.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- git, java
- Domain
- security, tooling
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100