OSSRH now requires GPG signing.

Added as a GitHub secret.
ServiceStack · Oct 11, 2023 · 409ca60 · 409ca60
1 parent be1e981
commit 409ca60
Show file tree

Hide file tree

Showing 4 changed files with 34 additions and 0 deletions.
diff --git a/.github/workflows/publish-android-maven-central.yml b/.github/workflows/publish-android-maven-central.yml
@@ -17,6 +17,11 @@ jobs:
           java-version: '11'
           distribution: 'adopt'
 
+      - name: Import GPG key
+        run: |
+          echo "${{ secrets.OSSRH_GPG }}" > private-key.asc
+          gpg --import --batch private-key.asc
+
       - name: Cache Gradle packages
         uses: actions/cache@v2
         with:
@@ -35,5 +40,6 @@ jobs:
         env:
           OSSRH_USERNAME: ${{ secrets.OSSRH_USERNAME }}
           OSSRH_TOKEN: ${{ secrets.OSSRH_TOKEN }}
+          SIGNING_KEY_ID: ${{ secrets.SIGNING_KEY_ID }}
         working-directory: ./src/AndroidClient
         run: ./gradlew android:publishAllPublicationsToOSSRHRepository
diff --git a/.github/workflows/publish-client-maven-central.yml b/.github/workflows/publish-client-maven-central.yml
@@ -17,6 +17,11 @@ jobs:
           java-version: '11'
           distribution: 'adopt'
 
+      - name: Import GPG key
+        run: |
+          echo "${{ secrets.OSSRH_GPG }}" > private-key.asc
+          gpg --import --batch private-key.asc
+
       - name: Cache Gradle packages
         uses: actions/cache@v2
         with:
@@ -35,5 +40,6 @@ jobs:
         env:
           OSSRH_USERNAME: ${{ secrets.OSSRH_USERNAME }}
           OSSRH_TOKEN: ${{ secrets.OSSRH_TOKEN }}
+          SIGNING_KEY_ID: ${{ secrets.SIGNING_KEY_ID }}
         working-directory: ./src/AndroidClient
         run: ./gradlew client:publishAllPublicationsToOSSRHRepository
diff --git a/src/AndroidClient/android/build.gradle b/src/AndroidClient/android/build.gradle
@@ -10,6 +10,16 @@ if (project.hasProperty('versionSuffix')) {
     version = "${version}-${versionSuffix}"
 }
 
+if (project.hasProperty('signing.keyId') || System.getenv("SIGNING_KEY_ID")) {
+    println "Signing enabled"
+    signing {
+        sign configurations.archives
+        keyId = project.findProperty("signing.keyId") ?: System.getenv("SIGNING_KEY_ID")
+    }
+} else {
+    println "Signing disabled"
+}
+
 // Specify dependencies
 dependencies {
     implementation 'com.google.code.gson:gson:2.8.9'

diff --git a/src/AndroidClient/client/build.gradle b/src/AndroidClient/client/build.gradle
@@ -10,6 +10,18 @@ if (project.hasProperty('versionSuffix')) {
     version = "${version}-${versionSuffix}"
 }
 
+apply plugin: 'signing'
+
+
+if (project.hasProperty('signing.keyId') || System.getenv("SIGNING_KEY_ID")) {
+    println "Signing enabled"
+    signing {
+        sign configurations.archives
+        keyId = project.findProperty("signing.keyId") ?: System.getenv("SIGNING_KEY_ID")
+    }
+} else {
+    println "Signing disabled"
+}
 
 // Specify dependencies
 dependencies {