From d673e1b65372d153f36f10c2ccd8b4e41edabd93 Mon Sep 17 00:00:00 2001 From: Sebastian Schuberth Date: Wed, 31 Jan 2024 11:19:11 +0100 Subject: [PATCH] build: Only sign when making official releases This implies not to sign JitPack snapshot builds, which would not work as signing is not set up there. Signed-off-by: Sebastian Schuberth --- .github/workflows/release.yml | 1 + buildSrc/src/main/kotlin/ort-publication-conventions.gradle.kts | 1 - 2 files changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 30eca6edd40f8..c2ff7dc3d8203 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -40,6 +40,7 @@ jobs: env: ORG_GRADLE_PROJECT_mavenCentralUsername: ${{ secrets.OSSRH_USERNAME }} ORG_GRADLE_PROJECT_mavenCentralPassword: ${{ secrets.OSSRH_PASSWORD }} + ORG_GRADLE_PROJECT_RELEASE_SIGNING_ENABLED: true ORG_GRADLE_PROJECT_signingInMemoryKey: ${{ secrets.SIGNING_KEY }} ORG_GRADLE_PROJECT_signingInMemoryKeyPassword: ${{ secrets.SIGNING_PASSWORD }} run: ./gradlew publishAndReleaseToMavenCentral diff --git a/buildSrc/src/main/kotlin/ort-publication-conventions.gradle.kts b/buildSrc/src/main/kotlin/ort-publication-conventions.gradle.kts index 3f3c486e66519..31a5f024148be 100644 --- a/buildSrc/src/main/kotlin/ort-publication-conventions.gradle.kts +++ b/buildSrc/src/main/kotlin/ort-publication-conventions.gradle.kts @@ -30,7 +30,6 @@ mavenPublishing { coordinates(groupId = "org${getGroupId(parent)}") publishToMavenCentral(SonatypeHost.DEFAULT) - signAllPublications() pom { name = project.name