diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml index 3fb17ba1..2c91c6bd 100644 --- a/.github/workflows/publish.yaml +++ b/.github/workflows/publish.yaml @@ -16,8 +16,11 @@ jobs: server-id: ossrh server-username: MAVEN_USERNAME server-password: MAVEN_PASSWORD + gpg-private-key: ${{ secrets.GPG_PRIVATE_KEY }} + gpg-passphrase: SIGN_KEY_PASSWORD - name: Publish package run: mvn --batch-mode deploy env: MAVEN_USERNAME: ${{ secrets.OSSRH_USERNAME }} MAVEN_PASSWORD: ${{ secrets.OSSRH_TOKEN }} + SIGN_KEY_PASSWORD: ${{ secrets.SIGN_KEY_PASS }} diff --git a/pom.xml b/pom.xml index 97aeb9bb..fdbaae42 100644 --- a/pom.xml +++ b/pom.xml @@ -2,17 +2,20 @@ 4.0.0 - + + + ossrh + https://oss.sonatype.org/content/repositories/snapshots + ossrh - Central Repository OSSRH https://oss.sonatype.org/service/local/staging/deploy/maven2/ com.spotify confidence-openfeature-provider - 0.1.0-SNAPSHOT + 0.0.1-SNAPSHOT Confidence OpenFeature provider for Java @@ -241,6 +244,31 @@ maven-source-plugin 3.3.0 + + + org.apache.maven.plugins + maven-gpg-plugin + 1.5 + + + sign-artifacts + verify + + sign + + + +