There's a very rough version of this in the Configurate codebase at https://github.com/SpongePowered/Configurate/blob/ea78b5c003ecf917b1081da24a01619bc2d22743/build-logic/src/main/groovy/org.spongepowered.configurate.build.publishing.gradle#L22

This implementation is quite brittle at the moment, rough improvements:

• support different property names
• support providing a toolchain to configure the jarsigner version used
• allow signing different outgoing configurations, to avoid junk like https://github.com/SpongePowered/Configurate/blob/ea78b5c003ecf917b1081da24a01619bc2d22743/format/yaml/build.gradle#L37