build: Only sign when making official releases

This implies not to sign JitPack snapshot builds, which would not work as signing is not set up there. Signed-off-by: Sebastian Schuberth <[email protected]>
oss-review-toolkit · Feb 1, 2024 · d673e1b · d673e1b
1 parent 5012819
commit d673e1b
Show file tree

Hide file tree

Showing 2 changed files with 1 addition and 1 deletion.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -40,6 +40,7 @@ jobs:
         env:
           ORG_GRADLE_PROJECT_mavenCentralUsername: ${{ secrets.OSSRH_USERNAME }}
           ORG_GRADLE_PROJECT_mavenCentralPassword: ${{ secrets.OSSRH_PASSWORD }}
+          ORG_GRADLE_PROJECT_RELEASE_SIGNING_ENABLED: true
           ORG_GRADLE_PROJECT_signingInMemoryKey: ${{ secrets.SIGNING_KEY }}
           ORG_GRADLE_PROJECT_signingInMemoryKeyPassword: ${{ secrets.SIGNING_PASSWORD }}
         run: ./gradlew publishAndReleaseToMavenCentral

diff --git a/buildSrc/src/main/kotlin/ort-publication-conventions.gradle.kts b/buildSrc/src/main/kotlin/ort-publication-conventions.gradle.kts
@@ -30,7 +30,6 @@ mavenPublishing {
 
     coordinates(groupId = "org${getGroupId(parent)}")
     publishToMavenCentral(SonatypeHost.DEFAULT)
-    signAllPublications()
 
     pom {
         name = project.name