Skip to content

Commit

Permalink
feat: Added the code for signing all artifacts after the release-buil…
Browse files Browse the repository at this point in the history
…d was finished.
  • Loading branch information
chrisdutz committed Feb 14, 2024
1 parent 15fc55e commit 2a3e5ea
Showing 1 changed file with 5 additions and 2 deletions.
7 changes: 5 additions & 2 deletions tools/release-3-perform-release.sh
Original file line number Diff line number Diff line change
Expand Up @@ -29,8 +29,11 @@
# 1. Do a simple release-perform command skip signing of artifacts and deploy to local directory (inside the Docker container)
docker compose run --rm releaser bash /ws/mvnw -e -Dmaven.repo.local=/ws/out/.repository -DaltDeploymentRepository=snapshot-repo::default::file:/ws/out/.local-artifacts-dir release:perform

# 2. Sign the artifacts
# TODO: it seems the gpg sign plugin only signs one artifact ... gotta find out how to sign every jar in out/.local-artifacts-dir
# 2. Sign all artifacts
find ./out/.local-artifacts-dir -print | grep -E '^((.*\.pom)|(.*\.jar)|(.*\.kar)|(.*\.nar)|(.*-features\.xml)|(.*-cycloneds\.json)|(.*-cycloneds\.xml)|(.*-site\.xml)|(.*\.zip))$' | while read -r line ; do
echo "Processing $line"
gpg -ab "$line"
done

# 3. Deploy the artifacts to Nexus
# TODO: Use the same technique we use on Jenkins to deploy everything in a local repo
Expand Down

0 comments on commit 2a3e5ea

Please sign in to comment.