in src/main/java/org/apache/maven/plugins/dependency/fromDependencies/CopyDependenciesMojo.java [298:324]
private void copySignatureFile(Artifact artifact, File destDir, String destFileName) {
File signatureFile = new File(artifact.getFile().getAbsolutePath() + SIGNATURE_EXTENSION);
if (!signatureFile.exists()) {
try {
org.eclipse.aether.artifact.Artifact aArtifact = RepositoryUtils.toArtifact(artifact);
org.eclipse.aether.artifact.Artifact aSignatureArtifact =
new SubArtifact(aArtifact, null, "jar" + SIGNATURE_EXTENSION);
org.eclipse.aether.artifact.Artifact resolvedSignature = getResolverUtil()
.resolveArtifact(aSignatureArtifact, getProject().getRemoteProjectRepositories());
signatureFile = resolvedSignature.getFile();
} catch (ArtifactResolutionException e) {
getLog().warn("Failed to resolve signature file for artifact: " + artifact, e);
}
}
if (signatureFile != null && signatureFile.exists()) {
File signatureDestFile = new File(destDir, destFileName + SIGNATURE_EXTENSION);
try {
copyUtil.copyFile(signatureFile, signatureDestFile);
} catch (IOException e) {
getLog().warn("Failed to copy signature file: " + signatureFile, e);
}
} else {
getLog().warn("Signature file for artifact " + artifact + " not found and could not be resolved.");
}
}