这是indexloc提供的服务,不要输入任何密码
Skip to content

JAR checksum of Maven artifact doesn't match GitHub release #9061

@der-eismann

Description

@der-eismann

Tracer Version(s)

1.50.1

Java Version(s)

21

JVM Vendor

Amazon Corretto

Bug Report

Basically #6837 is back, I guess caused by #9054. The checksums of the artifacts published on Maven central and GitHub are not matching. Obviously I'd expect the artifact to be the same, else there could be someone tampering with the JARs.

Expected Behavior

Checksum should be the same.

Reproduction Code

$ curl -s https://repo1.maven.org/maven2/com/datadoghq/dd-java-agent/1.50.1/dd-java-agent-1.50.1.jar | sha256sum -
ed321fb7ffe01fbe880b185f5876daf755bdc34c6812d6f5c071d860b6d7e93a  -
$ curl -sL https://github.com/DataDog/dd-trace-java/releases/download/v1.50.1/dd-java-agent-1.50.1.jar | sha256sum -
30fbddfc78662ebb22cfc3260d23ae35018a96e2ca00985c937044ee9858681a  -

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions