Enable gpg artifact signing during release

Signed-off-by: Andrea Lamparelli <a.lamparelli95@gmail.com>

Author: lampajr

.github/workflows/release.yml

@@ -19,7 +19,8 @@ jobs:
       - name: Import GPG key
         uses: crazy-max/ghaction-import-gpg@v6
         with:
-          gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
+          gpg_private_key: ${{ secrets.SIGN_GPG_PRIVATE_KEY }}
+          passphrase: ${{ secrets.SIGN_GPG_PASSPHRASE }}
       - name: List keys
         run: gpg -K
       - name: Set up JDK 17
@@ -30,6 +31,7 @@ jobs:
           server-id: central
           server-username: MAVEN_USERNAME
           server-password: MAVEN_PASSWORD
+          gpg-passphrase: MAVEN_GPG_PASSPHRASE
       - name: Setup release SSH key
         uses: webfactory/ssh-agent@v0.9.0
         with:
@@ -57,6 +59,7 @@ jobs:
         env:
           MAVEN_USERNAME: ${{ secrets.CENTRAL_PORTAL_USERNAME }}
           MAVEN_PASSWORD: ${{ secrets.CENTRAL_PORTAL_PASSWORD }}
+          MAVEN_GPG_PASSPHRASE: ${{ secrets.SIGN_GPG_PASSPHRASE }}
           GITHUB_ACTOR: ${{ github.actor }}
           GITHUB_TOKEN: ${{ github.token }}
           CI: true

pom.xml

@@ -494,6 +494,9 @@
                                 <goals>
                                     <goal>sign</goal>
                                 </goals>
+                                <configuration>
+                                    <useAgent>false</useAgent>
+                                </configuration>
                             </execution>
                         </executions>
                     </plugin>