This is an automated email from the ASF dual-hosted git repository. jungm pushed a commit to branch ee11 in repository https://gitbox.apache.org/repos/asf/tomee-tck.git
commit a09ea051bc2fd24c7e2c31c9abd9e0fd11094e8e Author: Markus Jung <[email protected]> AuthorDate: Sun Jul 19 01:45:11 2026 +0200 Verify the Security TCK zip checksum on download --- runner-standalone/security/pom.xml | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/runner-standalone/security/pom.xml b/runner-standalone/security/pom.xml index 64d4bf0..080b77e 100644 --- a/runner-standalone/security/pom.xml +++ b/runner-standalone/security/pom.xml @@ -33,6 +33,7 @@ <tck.standalone.container.skip>true</tck.standalone.container.skip> <security.tck.version>4.0.1</security.tck.version> <security.tck.url>https://download.eclipse.org/jakartaee/security/4.0/jakarta-security-tck-${security.tck.version}.zip</security.tck.url> + <security.tck.sha256>87172900057200e0a30a9f30cb3a75331fe428b9dac42153a093ee5c412b7d6d</security.tck.sha256> <tck.dir>${project.build.directory}/security-tck-${security.tck.version}/tck</tck.dir> <!-- The security TCK exercises full-profile features; TomEE Plus is the distribution apache/tomee validates it against. The plus classifier @@ -64,6 +65,12 @@ <skip>${tck.standalone.skip}</skip> <target> <get skipexisting="true" src="${security.tck.url}" dest="${project.build.directory}/jakarta-security-tck-${security.tck.version}.zip"/> + <checksum file="${project.build.directory}/jakarta-security-tck-${security.tck.version}.zip" algorithm="SHA-256" property="${security.tck.sha256}" verifyProperty="security.tck.checksum.matches"/> + <fail message="Checksum mismatch for the Jakarta Security TCK distribution"> + <condition> + <isfalse value="${security.tck.checksum.matches}"/> + </condition> + </fail> <unzip src="${project.build.directory}/jakarta-security-tck-${security.tck.version}.zip" dest="${project.build.directory}"/> <!-- Reports from a previous run in the same target tree:
