back to in-memory key

Author: musketyr

.github/workflows/release.yml

@@ -17,10 +17,12 @@ jobs:
         with:
           java-version: '11'
           distribution: 'zulu'
-      - name: Setup GPG
-        run: |
-          mkdir -p /home/runner/.gnupg
-          echo "${{ secrets.SIGNING_SECRET_KEY_BASE64 }}" | base64 -d > /home/runner/.gnupg/secring.gpg
+      - name: Decode PGP
+        id: write_file
+        uses: timheuer/base64-to-file@v1.2
+        with:
+          fileName: 'secret.pgp'
+          encodedString: ${{ secrets.SIGNING_SECRET_KEY_BASE64 }}
       - name: Semantic Version
         id: version
         uses: ncipollo/semantic-version-action@v1
@@ -30,5 +32,5 @@ jobs:
           MAVEN_CENTRAL_PASSWORD: ${{ secrets.MAVEN_CENTRAL_PASSWORD }}
           SIGNING_KEY_ID: ${{ secrets.SIGNING_KEY_ID }}
           SIGNING_PASSWORD: ${{ secrets.SIGNING_PASSWORD }}
-          SIGNING_SECRET_KEY_RING_FILE: /home/runner/.gnupg/secring.gpg
+          SIGNING_SECRET_KEY_PATH: ${{ steps.write_file.outputs.filePath }}
         run: ./gradlew gitPublishPush publishAndReleaseToMavenCentral "-Pversion=${{ steps.version.outputs.tag }}" -Prelease=true "-Dorg.ajoberstar.grgit.auth.username=${{ secrets.GH_PAGES_TOKEN }}" --stacktrace

build.gradle

@@ -24,9 +24,9 @@ plugins {
 
 if (!project.hasProperty('mavenCentralUsername'))       ext.mavenCentralUsername            = System.getenv('MAVEN_CENTRAL_USERNAME') ?: '**UNDEFINED**'
 if (!project.hasProperty('mavenCentralPassword'))       ext.mavenCentralPassword            = System.getenv('MAVEN_CENTRAL_PASSWORD') ?: '**UNDEFINED**'
-if (!project.hasProperty('signing.keyId'))              ext['signing.keyId']                = System.getenv('SIGNING_KEY_ID') ?: '**UNDEFINED**'
-if (!project.hasProperty('signing.password'))           ext['signing.password']             = System.getenv('SIGNING_PASSWORD') ?: '**UNDEFINED**'
-if (!project.hasProperty('signing.secretKeyRingFile'))  ext['signing.secretKeyRingFile']    = System.getenv('SIGNING_SECRET_KEY_RING_FILE') ?: '**UNDEFINED**'
+if (!project.hasProperty('signingInMemoryKeyId'))       ext.signingInMemoryKeyId            = System.getenv('SIGNING_KEY_ID') ?: '**UNDEFINED**'
+if (!project.hasProperty('signingInMemoryKeyPassword')) ext.signingInMemoryKeyPassword      = System.getenv('SIGNING_PASSWORD') ?: '**UNDEFINED**'
+if (!project.hasProperty('signingInMemoryKey'))         ext.signingInMemoryKey              = System.getenv('SIGNING_SECRET_KEY_PATH') ? rootProject.file(System.getenv('SIGNING_SECRET_KEY_PATH')).text : '**UNDEFINED**'
 
 config {
     release = (rootProject.findProperty('release') ?: false).toBoolean()
@@ -169,4 +169,10 @@ subprojects { subproject ->
         }
 
     }
+
+    signing {
+        useInMemoryPgpKeys(ext.signingInMemoryKey, ext.signingInMemoryKeyPassword )
+        sign publishing.publications
+    }
+
 }