The http4k Enterprise ecosystem provides the infrastructure and tooling that organisations need to use http4k with confidence in regulated and security-conscious environments. It covers authenticated repository access, build-time artifact verification, and supply chain security — ensuring that every http4k dependency in your build is traceable, signed, and verified.

What’s Included#

• Enterprise Repository — Authenticated Maven repository at maven.http4k.org delivering all http4k artifacts with cryptographically signed provenance, CycloneDX SBOMs, and license compliance reports. Setup guides for Gradle, Maven, Artifactory, and Nexus.

• Verify Plugin — Gradle plugin for automatic build-time verification of all http4k artifact signatures. Exports verification artifacts for independent inspection and generates attestation reports.

Access credentials are included with your http4k Enterprise Edition subscription.