# macaron-utilities

**Repository Path**: mirrors_oracle/macaron-utilities

## Basic Information

- **Project Name**: macaron-utilities
- **Description**: Macaron Untilities is a collection of companion tools and plugins for the Macaron supply chain security framework.
- **Primary Language**: Unknown
- **License**: UPL-1.0
- **Default Branch**: main
- **Homepage**: None
- **GVP Project**: No

## Statistics

- **Stars**: 0
- **Forks**: 0
- **Created**: 2025-08-06
- **Last Updated**: 2025-10-02

## Categories & Tags

**Categories**: Uncategorized

**Tags**: None

## README

[![semver](https://img.shields.io/badge/semantic%20versioning-2.0.0-yellow)](https://semver.org/) [![conventional-commits](https://img.shields.io/badge/conventional%20commits-1.0.0-yellow)](https://www.conventionalcommits.org/en/v1.0.0/)


# Macaron Utilities

Macaron Utilities is a collection of companion tools and plugins for the [Macaron](https://github.com/oracle/macaron) supply chain security framework.  

This repository includes:
- Maven and Gradle plugins to verify software artifacts using Verification Summary Attestations (VSAs) generated by Macaron.
  - Consisting of a common library in `artifact-verifier`, and the plugins in `artifact-verifier-maven` and `artifact-verifier-gradle`.

## Installation

Build and install `artifact-verifier` first, then build and install `artifact-verifier-maven` and `artifact-verifier-gradle` afterward.

## Contributing

This project welcomes contributions from the community. Before submitting a pull request, please [review our contribution guide](./CONTRIBUTING.md)

## Security

Please consult the [security guide](./SECURITY.md) for our responsible security vulnerability disclosure process

## License

Copyright (c) 2025, 2025 Oracle and/or its affiliates.
Macaron utilities are licensed under the [Universal Permissive License (UPL), Version 1.0](./LICENSE.txt).