From 0eb5fd1a2adfe9121db6c4dea90abc6da35846f6 Mon Sep 17 00:00:00 2001 From: Anthony Dahanne Date: Wed, 26 Aug 2026 19:56:59 -0400 Subject: [PATCH] docs: add local build instructions for newcomers Signed-off-by: Anthony Dahanne --- README.md | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/README.md b/README.md index b50ff5ec7..2373c0587 100644 --- a/README.md +++ b/README.md @@ -119,6 +119,20 @@ Sigstore Java and Sigstore Maven Plugin are signed with both PGP and sigstore. | ------------- | --------- | ------ | | 1.0.0 - 2.X.X | https://token.actions.githubusercontent.com | https://github.com/sigstore/sigstore-java/.github/workflows/release-sigstore-java-from-tag.yaml@refs/tags/X.X.X | +## Building locally + +Building requires **Java 21** to run Gradle, even though the main code stays Java 11 +compatible and tests target Java 17. Point `JAVA_HOME` at a Java 21 install and run: +``` +./gradlew build +``` + +Some tests start a local [fulcio](https://github.com/sigstore/fulcio) server, so +install it on your `PATH` first: +``` +go install github.com/sigstore/fulcio@main +``` + ## Troubleshooting To ensure maximum compatibility with the public Sigstore infrastructure,