Skip to content
This repository was archived by the owner on Feb 15, 2024. It is now read-only.

Commit 0273ca2

Browse files
author
Matthias Böckmann
committed
Moved GPG signing stage into a profile only executed by the build pipeline. This makes sure that "mvn clean install" will not fail for regular users without the private key.
1 parent dcd741c commit 0273ca2

1 file changed

Lines changed: 29 additions & 18 deletions

File tree

‎pom.xml‎

Lines changed: 29 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -158,27 +158,38 @@
158158
</execution>
159159
</executions>
160160
</plugin>
161-
<plugin>
162-
<groupId>org.apache.maven.plugins</groupId>
163-
<artifactId>maven-gpg-plugin</artifactId>
164-
<version>3.0.1</version>
165-
<configuration>
166-
<keyname>${gpg.keyname}</keyname>
167-
<passphraseServerId>${gpg.keyname}</passphraseServerId>
168-
</configuration>
169-
<executions>
170-
<execution>
171-
<id>sign-artifacts</id>
172-
<phase>verify</phase>
173-
<goals>
174-
<goal>sign</goal>
175-
</goals>
176-
</execution>
177-
</executions>
178-
</plugin>
179161
</plugins>
180162
</build>
181163

164+
<!-- This profile is for the continuous integration pipeline for deploying to the central repository, which requires artifacts to be signed -->
165+
<profiles>
166+
<profile>
167+
<id>CI</id>
168+
<build>
169+
<plugins>
170+
<plugin>
171+
<groupId>org.apache.maven.plugins</groupId>
172+
<artifactId>maven-gpg-plugin</artifactId>
173+
<version>3.0.1</version>
174+
<configuration>
175+
<keyname>${gpg.keyname}</keyname>
176+
<passphraseServerId>${gpg.keyname}</passphraseServerId>
177+
</configuration>
178+
<executions>
179+
<execution>
180+
<id>sign-artifacts</id>
181+
<phase>verify</phase>
182+
<goals>
183+
<goal>sign</goal>
184+
</goals>
185+
</execution>
186+
</executions>
187+
</plugin>
188+
</plugins>
189+
</build>
190+
</profile>
191+
</profiles>
192+
182193
<dependencyManagement>
183194
<dependencies>
184195
<dependency>

0 commit comments

Comments
 (0)