Skip to content

Commit

Permalink
fix: GPG key and Maven credentials in release workflow (#171)
Browse files Browse the repository at this point in the history
Revised the GPG key and Maven credentials used in the GitHub release
workflow for better security and consistency. The `gpg-private-key` and
`gpg-passphrase` are now using updated secret variables. Updated the
Maven credentials to use consistent naming conventions across the
workflow.
  • Loading branch information
pflynn-virtru authored Oct 1, 2024
1 parent 8b3cbed commit 864e9ce
Showing 1 changed file with 5 additions and 5 deletions.
10 changes: 5 additions & 5 deletions .github/workflows/release.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -41,14 +41,14 @@ jobs:
server-id: github
server-username: MAVEN_USERNAME
server-password: MAVEN_PASSWORD
gpg-private-key: ${{ secrets.OPENTDF_GPG_KEY }}
gpg-passphrase: ${{ secrets.OPENTDF_GPG_KEY_PASSPHRASE }}
gpg-private-key: ${{ secrets.GPG_KEY }}
gpg-passphrase: MAVEN_GPG_PASSPHRASE
- name: Publish package
run: mvn --batch-mode deploy -DskipTests
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
BUF_INPUT_HTTPS_USERNAME: opentdf-bot
BUF_INPUT_HTTPS_PASSWORD: ${{ secrets.PERSONAL_ACCESS_TOKEN_OPENTDF }}
MAVEN_USERNAME: ${{ secrets.MAVEN_CENTRAL_USERNAME }}
MAVEN_PASSWORD: ${{ secrets.MAVEN_CENTRAL_PASSWORD }}
MAVEN_GPG_PASSPHRASE: ${{ secrets.OPENTDF_GPG_KEY_PASSPHRASE }}
MAVEN_USERNAME: ${{ secrets.MAVEN_USERNAME }}
MAVEN_PASSWORD: ${{ secrets.MAVEN_PASSWORD }}
MAVEN_GPG_PASSPHRASE: ${{ secrets.GPG_KEY_PASSPHRASE }}

0 comments on commit 864e9ce

Please sign in to comment.