build: sign artifacts

Cubxity · Oct 23, 2021 · aef1ef5 · aef1ef5
1 parent 3e6f89c
commit aef1ef5
Show file tree

Hide file tree

Showing 4 changed files with 26 additions and 8 deletions.
diff --git a/.github/workflows/preview.yml b/.github/workflows/preview.yml
@@ -8,6 +8,11 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v1
+      - name: Configure GPG Key
+        run: |
+          echo -n "SIGNING_KEY" | base64 --decode > /tmp/keyring.gpg
+        env:
+          SIGNING_KEY: ${{ secrets.SIGNING_KEY }}
       - name: Set up JDK 16
         uses: actions/setup-java@v2
         with:
@@ -17,7 +22,7 @@ jobs:
       - name: Grant execute permission for gradlew
         run: chmod +x gradlew
       - name: Build with Gradle
-        run: ./gradlew assemble publish --no-daemon
+        run: ./gradlew assemble publish --no-daemon -Psigning.keyId=${{secrets.SIGNING_KEY_ID}} -Psigning.password= -Psigning.secretKeyRingFile=/tmp/keyring.gpg
         env:
           MAVEN_REPO_USER: ${{ secrets.MAVEN_REPO_USER }}
           MAVEN_REPO_PASS: ${{ secrets.MAVEN_REPO_PASS }}

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -8,6 +8,11 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v1
+      - name: Configure GPG Key
+        run: |
+          echo -n "SIGNING_KEY" | base64 --decode > /tmp/keyring.gpg
+        env:
+          SIGNING_KEY: ${{ secrets.SIGNING_KEY }}
       - name: Set up JDK 16
         uses: actions/setup-java@v2
         with:
@@ -17,7 +22,7 @@ jobs:
       - name: Grant execute permission for gradlew
         run: chmod +x gradlew
       - name: Build with Gradle
-        run: ./gradlew assemble publish --no-daemon
+        run: ./gradlew assemble publish --no-daemon -Psigning.keyId=${{secrets.SIGNING_KEY_ID}} -Psigning.password= -Psigning.secretKeyRingFile=/tmp/keyring.gpg
         env:
           MAVEN_REPO_USER: ${{ secrets.MAVEN_REPO_USER }}
           MAVEN_REPO_PASS: ${{ secrets.MAVEN_REPO_PASS }}

diff --git a/api/build.gradle.kts b/api/build.gradle.kts
@@ -61,4 +61,8 @@ publishing {
             }
         }
     }
-}
+}
+
+signing {
+    sign(publishing.publications["mavenJava"])
+}
diff --git a/build.gradle.kts b/build.gradle.kts
@@ -38,6 +38,7 @@ allprojects {
 subprojects {
     apply(plugin = "java")
     apply(plugin = "kotlin")
+    apply(plugin = "signing")
     apply(plugin = "maven-publish")
 
     tasks.withType<KotlinCompile> {
@@ -46,11 +47,6 @@ subprojects {
             freeCompilerArgs = listOf("-Xopt-in=kotlin.RequiresOptIn")
         }
     }
-    afterEvaluate {
-        tasks.findByName("shadowJar")?.also {
-            tasks.named("assemble") { dependsOn(it) }
-        }
-    }
     configure<PublishingExtension> {
         repositories {
             maven {
@@ -67,4 +63,12 @@ subprojects {
             }
         }
     }
+    afterEvaluate {
+        tasks.findByName("shadowJar")?.also {
+            tasks.named("assemble") { dependsOn(it) }
+        }
+        configure<SigningExtension> {
+            sign(tasks.findByName("shadowJar") ?: tasks["jar"])
+        }
+    }
 }