From d9ca0da1de65bc73b310f9c9abe728c5f27be2e1 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Herv=C3=A9=20Boutemy?= <hboutemy@apache.org>
Date: Sun, 9 Aug 2026 11:58:42 +0100
Subject: [PATCH] protect sha256 against unexpected directory

---
 .../plugins/artifact/buildinfo/DescribeBuildOutputMojo.java    | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/main/java/org/apache/maven/plugins/artifact/buildinfo/DescribeBuildOutputMojo.java b/src/main/java/org/apache/maven/plugins/artifact/buildinfo/DescribeBuildOutputMojo.java
index ba5e526..0b0e6ff 100644
--- a/src/main/java/org/apache/maven/plugins/artifact/buildinfo/DescribeBuildOutputMojo.java
+++ b/src/main/java/org/apache/maven/plugins/artifact/buildinfo/DescribeBuildOutputMojo.java
@@ -218,6 +218,9 @@ private String describeArtifact(Artifact a, boolean skipped) throws MojoExecutio
     }
 
     private String sha256(File file) throws MojoExecutionException {
+        if (file.isDirectory()) {
+            return "directory";
+        }
         try (InputStream is = Files.newInputStream(file.toPath())) {
             return DigestUtils.sha256Hex(is);
         } catch (IOException ioe) {