updates = policy.getUpdatePolicy();
            }
            if (policy.getChecksumPolicy() != null) {
                checksums = policy.getChecksumPolicy();
            }
        }

        return new RepositoryPolicy(enabled, updates, checksums);
    }

    public static String toRepositoryChecksumPolicy(final String artifactRepositoryPolicy) {
        switch (artifactRepositoryPolicy) {

git add go.mod tagtests.go
git commit -m 'create module tagtests'
git branch -m master
git branch b

git add v0.2.1
git commit -m 'v0.2.1'
git tag 'v0.2.1'

git checkout b
git add 'v0.2.2'
git commit -m 'v0.2.2'
git tag 'v0.2.2'

git checkout master
git merge b -m 'merge'

git show-ref --tags --heads
cmp stdout .git-refs

-- .git-refs --
59356c8cd18c5fe9a598167d98a6843e52d57952 refs/heads/b

git commit -m 'create module tagtests'

git branch b

echo v0.2.1 >v0.2.1
git add v0.2.1
git commit -m v0.2.1
git tag v0.2.1

git checkout b
echo v0.2.2 >v0.2.2
git add v0.2.2
git commit -m v0.2.2
git tag v0.2.2

git checkout master
git merge b -m merge

zip -r ../tagtests.zip .

    runs-on: ubuntu-latest
    permissions:
      # Needed to upload the results to code-scanning dashboard.
      security-events: write
      id-token: write

    steps:
      - name: "Checkout code"
        uses: actions/checkout@755da8c3cf115ac066823e79a1e1788f8940201b # v3.2.0
        with:
          persist-credentials: false

      - name: "Run analysis"

    runs-on: ubuntu-latest
    if: github.ref == 'refs/heads/master' || contains(github.event.pull_request.labels.*.name, 'documentation')

    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Configure JDK
        uses: actions/setup-java@v4
        with:
          distribution: 'zulu'
          java-version: 17

rm go.sum

go list -mod=mod -x -m all  # Add checksums for go.mod files.
stderr sum.golang.org/tile
! stderr github
! stderr proxy.golang.org/rsc.io/quote
stderr sum.golang.org/lookup/rsc.io/quote

go list -mod=mod -x rsc.io/quote  # Add checksums for module source.
! stderr .  # Adds checksums, but for entities already in the module cache.

cmp go.sum saved.sum

        first.artifactVerifications[0].checksums.find { it.kind == ChecksumKind.sha512 }.value == "5678abcd"
        first.artifactVerifications[1].artifactName == "bar-1.2.jar"
        first.artifactVerifications[1].checksums.find { it.kind == ChecksumKind.sha1 }.value == "9876"
        first.artifactVerifications[1].checksums.find { it.kind == ChecksumKind.sha512 }.value == "123def"

            }
            getExecOperations().exec(spec -> spec.commandLine("git", "clone", "--no-checkout", remoteUri, destinationDir.getAbsolutePath()));
        }
        getExecOperations().exec(spec -> {
            spec.commandLine("git", "checkout", getCommitId().get());
            spec.setWorkingDir(destinationDir);
        });
        getExecOperations().exec(spec -> {

}

// bitrotSelfTest performs a self-test to ensure that bitrot
// algorithms compute correct checksums. If any algorithm
// produces an incorrect checksum it fails with a hard error.
//
// bitrotSelfTest tries to catch any issue in the bitrot implementation
// early instead of silently corrupting data.
func bitrotSelfTest() {
	checksums := map[BitrotAlgorithm]string{

			checksums = 0
			parts = nil
		} else if len(parts) > 0 {
			checksums = len(parts) / c.Type.RawByteLen()
		}
		if !c.Type.Is(ChecksumIncludesMultipart) {
			parts = nil
		}
		n := binary.PutUvarint(tmp[:], uint64(checksums))
		b = append(b, tmp[:n]...)
		if len(parts) > 0 {
			b = append(b, parts...)
		}
	}
	return b
}