{"id":16464912,"url":"https://github.com/alikhachev/signing-plugin-inputs-problem-repro","last_synced_at":"2026-05-12T22:33:19.666Z","repository":{"id":188095597,"uuid":"659810524","full_name":"ALikhachev/signing-plugin-inputs-problem-repro","owner":"ALikhachev","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-26T18:24:12.000Z","size":103,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-01-10T10:32:37.388Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/ALikhachev.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2023-06-28T15:54:11.000Z","updated_at":"2024-09-26T18:24:16.000Z","dependencies_parsed_at":null,"dependency_job_id":"c572f05f-3eba-4ecd-bcc0-ddadf4688bac","html_url":"https://github.com/ALikhachev/signing-plugin-inputs-problem-repro","commit_stats":null,"previous_names":["alikhachev/signing-plugin-inputs-problem-repro"],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ALikhachev%2Fsigning-plugin-inputs-problem-repro","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ALikhachev%2Fsigning-plugin-inputs-problem-repro/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ALikhachev%2Fsigning-plugin-inputs-problem-repro/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ALikhachev%2Fsigning-plugin-inputs-problem-repro/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/ALikhachev","download_url":"https://codeload.github.com/ALikhachev/signing-plugin-inputs-problem-repro/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":241014089,"owners_count":19894189,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-10-11T11:30:24.936Z","updated_at":"2026-05-12T22:33:19.613Z","avatar_url":"https://github.com/ALikhachev.png","language":"Java","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Reproducer of the signing plugin publishing issue\n\n1. Execute `./gradlew publish`\n\nWe have 2 different publications of the same code. The publication finishes without any issues.\n\n\u003cbr/\u003e\n\n2. Execute `./gradlew publish -Psign-publications=true`\n\nWe still have the 2 publications, want to sign them using the signing plugin.\n\nIt fails with an error:\n```\nA problem was found with the configuration of task ':signPub2Publication' (type 'Sign').\n  - Gradle detected a problem with the following location: 'path-to-the-project/signing-plugin-inputs-problem/build/libs/signing-plugin-inputs-problem-1.0-SNAPSHOT.jar.asc'.\n    \n    Reason: Task ':publishPub1PublicationToMavenRepository' uses this output of task ':signPub2Publication' without declaring an explicit or implicit dependency. This can lead to incorrect results being produced, depending on what order the tasks are executed.\n    \n    Possible solutions:\n      1. Declare task ':signPub2Publication' as an input of ':publishPub1PublicationToMavenRepository'.\n      2. Declare an explicit dependency on ':signPub2Publication' from ':publishPub1PublicationToMavenRepository' using Task#dependsOn.\n      3. Declare an explicit dependency on ':signPub2Publication' from ':publishPub1PublicationToMavenRepository' using Task#mustRunAfter.\n    \n    Please refer to https://docs.gradle.org/8.1.1/userguide/validation_problems.html#implicit_dependency for more details about this problem.\n\n```\n\n\u003cbr/\u003e\n\n3. Execute `./gradlew publish -Psign-publications=true -Papply-ugly-workaround=true`\n\nWe define cross dependencies between signing and publication tasks. It finishes almost without any issues.\nHowever, now the same signature for the common files is being generated twice.\n\n**Note:** the key used here should **not** be used anywhere outside the reproducer project.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Falikhachev%2Fsigning-plugin-inputs-problem-repro","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Falikhachev%2Fsigning-plugin-inputs-problem-repro","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Falikhachev%2Fsigning-plugin-inputs-problem-repro/lists"}