search

neboskreb / red-and-blue

JUnit 5 extension for easy injection of Red and Blue objects
Apache License 2.0
1 stars 0 forks source link

Github workflow fails to release the artifact to Maven Central #68

Open neboskreb opened 3 weeks ago

neboskreb commented 3 weeks ago

Github workflow fails to release the artifact to Maven Central.

The package fails to sign:

Execution failed for task ':red-and-blue:signMavenJavaPublication'.
> Cannot perform signing task ':red-and-blue:signMavenJavaPublication' because it has no configured signatory

GPG key is linked to my account, it just needs to pass to the action script so Gradle could consume it.

Currently, Gradle script uses file-based approach, which obviously is not portable to the cloud. Global gradle.properties refers to secring.gpg file:

signing.keyId=D8219BEC
signing.password=
signing.secretKeyRingFile=.../.gnupg/secring.gpg

Should use memory-based technique and pass the keys as secrets.

This link can be helpful: https://github.com/vanniktech/gradle-maven-publish-plugin/issues/248