From e71e1dadafa459c824d8913e7c20ed67766c37d0 Mon Sep 17 00:00:00 2001 From: Christoph Strobl Date: Fri, 16 Feb 2024 10:54:48 +0100 Subject: [PATCH] Sign deployed artefacts. Add gpg signing for artifactory. See: #75 --- .../data/release/build/MavenBuildSystem.java | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/src/main/java/org/springframework/data/release/build/MavenBuildSystem.java b/src/main/java/org/springframework/data/release/build/MavenBuildSystem.java index 8ae828a..aa065f9 100644 --- a/src/main/java/org/springframework/data/release/build/MavenBuildSystem.java +++ b/src/main/java/org/springframework/data/release/build/MavenBuildSystem.java @@ -311,6 +311,8 @@ class MavenBuildSystem implements BuildSystem { Authentication authentication = properties.getAuthentication(module); + Gpg gpg = getGpg(); + CommandLine arguments = CommandLine.of(Goal.CLEAN, Goal.DEPLOY, // profile("ci,release,artifactory"), // SKIP_TESTS, // @@ -320,7 +322,10 @@ class MavenBuildSystem implements BuildSystem { arg("artifactory.password").withValue(authentication.getPassword()), arg("artifactory.build-name").withQuotedValue(information.getBuildName()), arg("artifactory.build-number").withValue(information.getBuildNumber()), - arg("artifactory.project").withValue(information.getProject())) + arg("artifactory.project").withValue(information.getProject()), + arg("gpg.executable").withValue(gpg.getExecutable()), // + arg("gpg.keyname").withValue(gpg.getKeyname()), // + arg("gpg.passphrase").withValue(gpg.getPassphrase())) // .andIf(!ObjectUtils.isEmpty(properties.getSettingsXml()), settingsXml(properties.getSettingsXml())); mvn.execute(module.getSupportedProject(), arguments);