Execution failed for task ':buildSrc:licenseTexts:compileKotlin'. > Checksum/PGP violations detected on resolving configuration :licenseTexts:compileClasspath Trusted PGP keys for group com.squareup are [682f765eea718d250bbdb2f1685c46769dbb5e5d], however artifact is signed by [dbd744ace7ade6aa50dd591f66b50994442d2d40] only: com.squareup:kotlinpoet-jvm:1.17.0 (pgp=[dbd744ace7ade6aa50dd591f66b50994442d2d40], sha512=[computation skipped]) There might be more checksum violations, however, current configuration specifies the build to fail on the first violation. You might use the following properties: * -PchecksumIgnore temporary disables checksum-dependency-plugin (e.g. to try new dependencies) * -PchecksumUpdate updates checksum.xml and it will fail after the first violation so you can review the diff * -PchecksumUpdateAll (insecure) updates checksum.xml with all the new discovered checksums * -PchecksumFailOn=build_finish (insecure) It will postpone the failure till the build finish It will collect all the violations, however untrusted code might be executed (e.g. from a plugin) You can find updated checksum.xml file at /home/runner/work/vlsi-release-plugins/vlsi-release-plugins/buildSrc/build/checksum/checksum.xml. You might add -PchecksumUpdate to update root checksum.xml file.