Merge branch 'features/sbt-best-practice-sonatype-release' into template

deploy.sbt.disabled

@@ -2,15 +2,17 @@ enablePlugins(Travis)
 
 enablePlugins(SonatypeRelease)
 
-lazy val secret = project settings(publishArtifact := false) configure { secret =>
-  sys.env.get("GITHUB_PERSONAL_ACCESS_TOKEN") match {
-    case Some(pat) =>
-      import org.eclipse.jgit.transport.UsernamePasswordCredentialsProvider
-      secret.addSbtFilesFromGit(
-        "https://github.com/ThoughtWorksInc/tw-data-china-continuous-delivery-password.git",
-        new UsernamePasswordCredentialsProvider(pat, ""),
-        file("secret.sbt"))
-    case None =>
-      secret
-  }
+lazy val secret = project.settings(publishArtifact := false).in {
+  val secretDirectory = file(sourcecode.File()).getParentFile / "secret"
+  org.apache.commons.io.FileUtils.deleteDirectory(secretDirectory)
+  org.eclipse.jgit.api.Git
+    .cloneRepository()
+    .setURI("https://github.com/ThoughtWorksInc/tw-data-china-continuous-delivery-password.git")
+    .setDirectory(secretDirectory)
+    .setCredentialsProvider(
+      new org.eclipse.jgit.transport.UsernamePasswordCredentialsProvider(sys.env("GITHUB_PERSONAL_ACCESS_TOKEN"), "")
+    )
+    .call()
+    .close()
+  secretDirectory
 }