Execution failed for task ':buildSrc:licenseTexts:compileKotlin'. > Checksum/PGP violations detected on resolving configuration :licenseTexts:compileClasspath Trusted PGP keys for group com.fasterxml.jackson.core are [6214760097dc5cfad0175ac2c9fbaa83a8753994], however artifact is signed by [28118c070cb22a0175a2e8d43d12ca2ac19f3181] only: com.fasterxml.jackson.core:jackson-annotations:2.18.2 (pgp=[28118c070cb22a0175a2e8d43d12ca2ac19f3181], sha512=[computation skipped]) com.fasterxml.jackson.core:jackson-core:2.18.2 (pgp=[28118c070cb22a0175a2e8d43d12ca2ac19f3181], sha512=[computation skipped]) com.fasterxml.jackson.core:jackson-databind:2.18.2 (pgp=[28118c070cb22a0175a2e8d43d12ca2ac19f3181], sha512=[computation skipped]) Trusted PGP keys for group com.fasterxml.jackson.module are [6214760097dc5cfad0175ac2c9fbaa83a8753994], however artifact is signed by [28118c070cb22a0175a2e8d43d12ca2ac19f3181] only: com.fasterxml.jackson.module:jackson-module-kotlin:2.18.2 (pgp=[28118c070cb22a0175a2e8d43d12ca2ac19f3181], sha512=[computation skipped]) There might be more checksum violations, however, current configuration specifies the build to fail on the first violation. You might use the following properties: * -PchecksumIgnore temporary disables checksum-dependency-plugin (e.g. to try new dependencies) * -PchecksumUpdate updates checksum.xml and it will fail after the first violation so you can review the diff * -PchecksumUpdateAll (insecure) updates checksum.xml with all the new discovered checksums * -PchecksumFailOn=build_finish (insecure) It will postpone the failure till the build finish It will collect all the violations, however untrusted code might be executed (e.g. from a plugin) You can find updated checksum.xml file at /home/runner/work/vlsi-release-plugins/vlsi-release-plugins/buildSrc/build/checksum/checksum.xml. You might add -PchecksumUpdate to update root checksum.xml file.