diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 42e1cbb..af4f334 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -11,7 +11,7 @@ on: jobs: build: - name: "Build JDK 1.8" + name: "Build" runs-on: ubuntu-latest strategy: matrix: diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 8497d00..1ec2f48 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -1,4 +1,4 @@ -name: Publish +name: Publish Release on: release: @@ -16,26 +16,26 @@ jobs: distribution: 'zulu' java-version: 8.0.x - - name: Set up GPG - run: echo -n "${GPG_PRIVATE_KEY}" | base64 --decode > ${GITHUB_WORKSPACE}/${GPG_KEY_ID}.gpg - env: - GPG_KEY_ID: ${{ secrets.GPG_KEY_ID }} - GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }} - - name: Set up Maven uses: s4u/maven-settings-action@v2.4.1 with: servers: '[{"id": "ossrh", "username": "${{secrets.OSSRH_USERNAME}}", "password": "${{secrets.OSSRH_PASSWORD}}"}]' + - name: Set up GPG + run: | + export GPG_TTY=$(tty) + echo -n "${GPG_PRIVATE_KEY}" | base64 --decode | gpg --batch --import + env: + GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }} + - name: "Maven Build" run: ./mvnw -Dinvoker.skip=true install - name: "Maven Publish" run: | - ./mvnw -Dinvoker.skip=true deploy \ - -Dsigning.keyId=${GPG_KEY_ID} \ - -Dsigning.password=${GPG_PASSPHRASE} \ - -Dsigning.secretKeyRingFile=${GITHUB_WORKSPACE}/${GPG_KEY_ID}.gpg + ./mvnw -Dinvoker.skip=true -Pgpg deploy \ + -Dgpg.keyname=${GPG_KEY_ID} \ + -Dgpg.passphrase=${GPG_PASSPHRASE} \ env: GPG_KEY_ID: ${{ secrets.GPG_KEY_ID }} GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }} diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index c8a3818..c047367 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -1,4 +1,4 @@ -name: Release +name: Perform Release on: workflow_dispatch: diff --git a/pom.xml b/pom.xml index b8a6884..27f7de5 100644 --- a/pom.xml +++ b/pom.xml @@ -381,6 +381,30 @@ + + gpg + + false + + + + + org.apache.maven.plugins + maven-gpg-plugin + 3.0.1 + + + sign-artifacts + verify + + sign + + + + + + + it