Add keys for dependencies of Dropwizard

[rhowe]

These are the keys (or lack thereof) for the current dependencies of the
Dropwizard project.

I haven't verified their authenticity. Caveat emptor.

[rhowe]

FYI @joschi & @jplock

mvn -Dpgpverify.keysMapLocation=https://raw.github.com/rhowe/pgp-keys-map/add-more/resources/pgp-keys-map.list org.simplify4u.plugins:pgpverify-maven-plugin:check

runs clean on the dropwizard repo for me

[slawekjaranowski]

Very thanks for this PR.

Please also add some examples of artifacts to test pom, when version will be upgraded we have sure that keys is still correct.

You can add to pgp-keys-map-test1/pom.xml or create separate module if you wish add more dropwizard artifacts.

[rhowe]

Very thanks for this PR.

Please also add some examples of artifacts to test pom, when version will be upgraded we have sure that keys is still correct.

You can add to pgp-keys-map-test1/pom.xml or create separate module if you wish add more dropwizard artifacts.

Thanks. I've added entries for everything, except the google protobuf key is for an older version of the lib than is in the test pom, so I left that version as-is.

What about the org.glassfish.jersey.... ones? Should I change that to be org.glassfish.jersey.*?

[slawekjaranowski]

@rhowe please fix build ...

[slawekjaranowski]

You can use org.glassfish.jersey.* the same key is used.

I don't see any dependency for io.dropwizard...

Maybe we can use also io.dropwizard.* for keys

[sonarcloud]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
0.0% Duplication