gradle/verification-metadata.xml

<?xml version="1.0" encoding="UTF-8"?>
<verification-metadata xmlns="https://schema.gradle.org/dependency-verification" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="https://schema.gradle.org/dependency-verification https://schema.gradle.org/dependency-verification/dependency-verification-1.0.xsd">
   <configuration>
      <verify-metadata>true</verify-metadata>
      <verify-signatures>false</verify-signatures>
       <trusted-artifacts>
           <trust group="^(?!org\.core4j$).*$" regex="true"/> <!-- Trust all except ones in the regex -->
       </trusted-artifacts>
   </configuration>
   <components>
      <!-- See details on "org.core4j" dependency in TW-86645 -->
      <component group="org.core4j" name="core4j" version="0.5">
         <artifact name="core4j-0.5.jar">
            <sha256 value="2ec2fffda454ae7c11cbed9a3b8d28d21f75a0fab1c7a7ff56fc74c23cbd68ad" origin="Generated by Gradle"/>
         </artifact>
         <artifact name="core4j-0.5.pom">
            <sha256 value="04f206e7de7b8812bd0fb2886907af580bb9c4b6bd41c21f85df95a0b7a1fe83" origin="Generated by Gradle"/>
         </artifact>
      </component>
   </components>
</verification-metadata>