Skip to content

Conversation

sugarmanz
Copy link
Contributor

What is the goal of this PR?

Support using GPG keys that are passphrase protected

What are the changes implemented in this PR?

Pulls passphrase from DEPLOY_MAVEN_GPG_PASSPHRASE environment variable

Copy link
Member

@alexjpwalker alexjpwalker left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes, this looks like something we should add support for.

Left one comment.

upload(maven_url, username, password, jar_path, filename_base + '.jar')
if should_sign:
upload(maven_url, username, password, sign(jar_path), filename_base + '.jar.asc')
upload(maven_url, username, password, sign(jar_path, gpg_passphrase), filename_base + artifact_extension + '.asc')
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It looks like this change depends on:

We can either merge this PR by reverting to the following:

Suggested change
upload(maven_url, username, password, sign(jar_path, gpg_passphrase), filename_base + artifact_extension + '.asc')
upload(maven_url, username, password, sign(jar_path, gpg_passphrase), filename_base + '.jar.asc')

Or wait until #344 is merged.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants