diff --git a/Reproducible-Build-Hashes.md b/Reproducible-Build-Hashes.md index e6d7774..18e6e46 100644 --- a/Reproducible-Build-Hashes.md +++ b/Reproducible-Build-Hashes.md @@ -5,7 +5,13 @@ Here is a list of known hashes, generated by running These hashes should match those published to the maven repositories (e.g. [pgpainless-core-1.1.3.jar.sha256](https://repo1.maven.org/maven2/org/pgpainless/pgpainless-core/1.1.3/pgpainless-core-1.1.3.jar.sha256)). To quickly fetch those checksums, you can use e.g. ```shell -gradle -Prelease=1.1.3 mavenCentralChecksums +./gradlew -Prelease=1.1.3 mavenCentralChecksums +``` + +To quickly compare the hashes, run +```shell +git checkout X.Y.Z +./gradlew --quiet clean assemble &> /dev/null && sha256sum {pgpainless-core,pgpainless-sop,pgpainless-cli}/build/libs/*.jar && ./gradlew -Prelease=X.Y.Z mavenCentralChecksums ``` *Releases prior to 1.3.1 were built without static file modes.