Use sn-ci to import gpg key

streamnative · Aug 2, 2023 · 7e87ed2 · 7e87ed2
1 parent 8b13843
commit 7e87ed2
Show file tree

Hide file tree

Showing 2 changed files with 30 additions and 0 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -16,6 +16,17 @@ jobs:
           distribution: temurin
           java-version: 8
 
+      - uses: actions/checkout@v2
+        with:
+          repository: streamnative/streamnative-ci
+          token: ${{ secrets.SNBOT_GITHUB_TOKEN }}
+          ref: master
+          path: ci
+
+      - name: Import GPG key
+        run: |
+          ci/.github/bot/setup-git.sh
+
       - name: Release Maven package
         uses: samuelmeuli/action-maven-publish@v1
         with:

diff --git a/pom.xml b/pom.xml
@@ -482,6 +482,25 @@
       <id>release</id>
       <build>
         <plugins>
+          <plugin>
+            <artifactId>maven-gpg-plugin</artifactId>
+            <executions>
+              <execution>
+                <id>sign-artifacts</id>
+                <phase>verify</phase>
+                <goals>
+                  <goal>sign</goal>
+                </goals>
+              </execution>
+            </executions>
+            <configuration>
+              <!-- Prevent `gpg` from using pinentry programs -->
+              <gpgArguments>
+                <arg>--pinentry-mode</arg>
+                <arg>loopback</arg>
+              </gpgArguments>
+            </configuration>
+          </plugin>
           <plugin>
             <groupId>org.sonatype.plugins</groupId>
             <artifactId>nexus-staging-maven-plugin</artifactId>