commit SHA support, signed publish support, sonatype support