Skip to content
This repository has been archived by the owner on Feb 12, 2022. It is now read-only.

Commit

Permalink
Updated readme
Browse files Browse the repository at this point in the history
  • Loading branch information
moxie0 committed Jun 5, 2014
1 parent 02ad7bc commit aab511f
Showing 1 changed file with 5 additions and 3 deletions.
8 changes: 5 additions & 3 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@

A gradle plugin that enables static verification for remote dependencies.

Build systems like gradle and maven allow one to specify dependencies on versioned artifacts. An
Build systems like gradle and maven allow one to specify dependencies for versioned artifacts. An
Android project might list dependencies like this:

dependency {
Expand Down Expand Up @@ -71,7 +71,7 @@ is later compromised, an attacker won't be able to undetectably modify these art
## Using Witness

Unfortunately, it doesn't make sense to publish `gradle-witness` as an artifact, since that
creates a bootstrapping problem. To use, `gradle-witness`, the jar needs to be built and included
creates a bootstrapping problem. To use `gradle-witness`, the jar needs to be built and included
in your project:

$ git clone https://github.com/WhisperSystems/gradle-witness.git
Expand All @@ -92,6 +92,8 @@ It might look something like:
}
}

apply plugin: 'witness'

At this point you can use `gradle-witness` in your project. If you're feeling "trusting on first
use," you can have `gradle-witness` calculate the sha256sum for all your project's dependencies
(and transitive dependencies!) for you:
Expand Down Expand Up @@ -122,4 +124,4 @@ Running `gradle -q calculateChecksums` will print:
...which you can then include directly below the `dependency` definition in the project's `build.gradle`.

And that's it! From then on, running a standard `gradle build` will verify the integrity of
the project's dependencies.
the project's dependencies.

0 comments on commit aab511f

Please sign in to comment.