[logging-log4j-tools] branch master updated: INFRA-23996 Try to make `sign-maven-plugin` work, take 1

[vy...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

vy pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/logging-log4j-tools.git


The following commit(s) were added to refs/heads/master by this push:
     new 9a674d8  INFRA-23996 Try to make `sign-maven-plugin` work, take 1
9a674d8 is described below

commit 9a674d8c23d233de9d31499e64cbc4e98733b30d
Author: Volkan Yazıcı <vo...@yazi.ci>
AuthorDate: Tue Jan 3 21:11:19 2023 +0100

    INFRA-23996 Try to make `sign-maven-plugin` work, take 1
---
 .github/workflows/build.yml |  6 ++----
 pom.xml                     | 13 ++++---------
 2 files changed, 6 insertions(+), 13 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 1e0737e..5fcd5f7 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -120,7 +120,6 @@ jobs:
           server-id: ${{ github.ref == 'refs/heads/master' && 'apache.snapshots.https' || 'apache.releases.https' }}
           server-username: NEXUS_USERNAME
           server-password: NEXUS_PASSWORD
-          gpg-private-key: ${{ secrets.GPG_SECRET_KEY }}
 
       - name: Export artifact version
         run: |
@@ -168,17 +167,16 @@ jobs:
         # `package` must precede `gpg:sign`.
         run: |
           gpg --list-secret-keys
-          echo $RANDOM | gpg -a -s
-          cat ~/.m2/settings.xml
           ./mvnw \
             --show-version --batch-mode --errors --no-transfer-progress \
             -DskipTests=true \
             -DinstallAtEnd=true \
             -DdeployAtEnd=true \
-            package gpg:sign install:install deploy:deploy
+            package sign:sign install:install deploy:deploy
         env:
           NEXUS_USERNAME: ${{ secrets.NEXUS_USER }}
           NEXUS_PASSWORD: ${{ secrets.NEXUS_PW }}
+          SIGN_KEY: ${{ secrets.GPG_SECRET_KEY }}
 
       - name: Create artifacts (RELEASE)
         if: startsWith(github.ref, 'refs/heads/release/')
diff --git a/pom.xml b/pom.xml
index a297bec..464ec36 100644
--- a/pom.xml
+++ b/pom.xml
@@ -67,7 +67,7 @@
 
     <!-- plugin versions -->
     <flatten-maven-plugin.version>1.3.0</flatten-maven-plugin.version>
-    <maven-gpg-plugin.version>3.0.1</maven-gpg-plugin.version>
+    <sign-maven-plugin.version>1.0.1</sign-maven-plugin.version>
 
   </properties>
 
@@ -146,16 +146,11 @@
         <plugins>
 
           <plugin>
-            <groupId>org.apache.maven.plugins</groupId>
-            <artifactId>maven-gpg-plugin</artifactId>
-            <version>${maven-gpg-plugin.version}</version>
-            <configuration>
-              <useAgent>false</useAgent>
-            </configuration>
+            <groupId>org.simplify4u.plugins</groupId>
+            <artifactId>sign-maven-plugin</artifactId>
+            <version>${sign-maven-plugin.version}</version>
             <executions>
               <execution>
-                <id>sign-artifacts</id>
-                <phase>verify</phase>
                 <goals>
                   <goal>sign</goal>
                 </goals>