microsoft / kiota-java

Java libraries for Kiota-generated API clients.
https://aka.ms/kiota/docs
MIT License
22 stars 23 forks source link

security - automate the OSS portal steps #1257

Open baywet opened 2 months ago

baywet commented 2 months ago

In the current releasing process, we manually go to the maven central portal to close and release the artifacts our CI uploaded. Not only this is time consuming, it's a security concern (since this platform doesn't support organizations, we're sharing credentials)

We should explore automating those steps, and once we have the recipe, replicate on other java repositories.

https://central.sonatype.org/publish/publish-gradle/#releasing-the-deployment-to-the-central-repository https://github.com/gradle-nexus/publish-plugin/

Note: this wouldn't be necessary if ESRP release was available for GHA.

andrueastman commented 3 days ago

@Ndiritu to confirm if this is possible to do in the next couple of weeks when he gets back.