commit 7adb7cd4a7a7009409fd178e36403cc1d379a0e1
author Aurimas <aurimas@liutikas.net> Thu Mar 10 01:19:02 2022 +0000
committer Copybara-Service <copybara-worker@google.com> Wed Mar 09 17:20:36 2022 -0800
tree b457db905d5d8e32ef3ba5e9e02762d3eb04e322
parent 645651b8dfa244a7c104fd33d6b28168a36dcd6a

[GH] Enable signature verification for playground

## Proposed Changes

Enable Gradle signature verification for playground projects

## Testing

Test: in room/ ./gradlew tasks

This is an imported pull request from https://github.com/androidx/androidx/pull/335.

Resolves #335
Github-Pr-Head-Sha: 82a6fd3d8e7bb32f9568e0afc28a3e0581161f8e
GitOrigin-RevId: 3844fd5a524b2218620f7dee91ff5df5328f0480
Change-Id: I61551b3debb883c7b81435d84d8fb448200f6f39

gradle/verification-metadata.xml

diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
index 32a8bdf..3d59987 100644
--- a/gradle/verification-metadata.xml
+++ b/gradle/verification-metadata.xml
@@ -764,8 +764,12 @@
             </sha256>
          </artifact>
          <artifact name="gradle-download-task-4.1.1.pom">
-            <pgp value="1fa37fbe4453c1073e7ef61d6449005f96bc97a3"/>
-            <sha256 value="85e6607260dbbdb5e85f1988840b0d9ac4be9119dde90a1baca8ea775646415a" origin="Generated by Gradle"/>
+            <ignored-keys>
+               <ignored-key id="1fa37fbe4453c1073e7ef61d6449005f96bc97a3" reason="PGP verification failed"/>
+            </ignored-keys>
+            <sha256 value="85e6607260dbbdb5e85f1988840b0d9ac4be9119dde90a1baca8ea775646415a" origin="Generated by Gradle">
+               <also-trust value="1109f1f71a54254d590337d8b9d443f9dfc08728c9c1d8335655cc1dcc88c0b9"/>
+            </sha256>
          </artifact>
       </component>
       <!-- Unsigned -->
@@ -960,7 +964,15 @@
             <ignored-keys>
                <ignored-key id="6f538074ccebf35f28af9b066a0975f8b1127b83" reason="PGP verification failed"/>
             </ignored-keys>
-            <sha256 value="a5f64c18c24f37229e86822d2cf36c7e7642dbafb36a2fb0dbeabf91701143b4" origin="Generated by Gradle"/>
+            <sha256 value="a5f64c18c24f37229e86822d2cf36c7e7642dbafb36a2fb0dbeabf91701143b4" origin="Generated by Gradle">
+               <also-trust value="a4a3096b6159659245be113960a6883863c43f3a53926f38c16b8c5c5993b49d"/>
+            </sha256>
+         </artifact>
+      </component>
+      <!-- Unsigned -->
+      <component group="org.jetbrains.kotlin.jvm" name="org.jetbrains.kotlin.jvm.gradle.plugin" version="1.6.10">
+         <artifact name="org.jetbrains.kotlin.jvm.gradle.plugin-1.6.10.pom">
+            <sha256 value="8310d2fcef13de0eb531fad057dd278020b02f9660a271e9f9455a0eeebc18a0"/>
          </artifact>
       </component>
       <!-- Unsigned -->