sbt-pgp-coursier
This plugin is meant to be used in conjunction with sbt-pgp. sbt-pgp has a checkPgpSignatures command, that can validate
the PGP keys of your dependencies. sbt-pgp-coursier ensures coursier is used
during the resolution triggered by checkPgpSignatures, that downloads
PGP signatures in particular.
Setup
Add sbt-pgp-coursier to project/plugins.sbt, with
addSbtPlugin("io.get-coursier" % "sbt-pgp-coursier" % "2.0.0-RC6")
Usage
Running the checkPgpSignatures from sbt-pgp then relies on coursier
to download artifacts,
$ sbt checkPgpSignatures