anchor.diff:  <verification-metadata>
      <configuration>
         <trusted-artifacts>
  -         <trust group="^com[.]mycompany($|([.].*))" regex="true"/>
  +         <trust group="^com[.]mycompany($|([.].*))" regex="true" reason="We trust all mycompany artifacts"/>
         </trusted-artifacts>
      </configuration>
   </verification-metadata>
  
positive.code: - `version`, the version of the artifact to trust
  - `file`, the name of the artifact _file_ to trust
  - `regex`, a boolean saying if the `group`, `name`, `version` and `file` attributes need to be interpreted as regular expressions (defaults to `false`)
  
  In the example above it means that the trusted artifacts would be artifacts in `com.mycompany` but not `com.mycompany.other`.
  To trust all artifacts in `com.mycompany` and all subgroups, you can use:
  
negative.code: <verification-metadata>
     <configuration>
        <trusted-artifacts>
           <trust group="com.mycompany" reason="We trust mycompany artifacts"/>
        </trusted-artifacts>
     </configuration>
  </verification-metadata>
  