From 72d404227e4cc086aa81c5bd60f660104505baa3 Mon Sep 17 00:00:00 2001 From: A2 Geek Date: Sat, 26 Sep 2026 15:22:31 -0500 Subject: [PATCH 1/6] Create signing.yaml --- .github/workflows/signing.yaml | 40 ++++++++++++++++++++++++++++++++++ 1 file changed, 40 insertions(+) create mode 100644 .github/workflows/signing.yaml diff --git a/.github/workflows/signing.yaml b/.github/workflows/signing.yaml new file mode 100644 index 0000000..4c41137 --- /dev/null +++ b/.github/workflows/signing.yaml @@ -0,0 +1,40 @@ +# Just experimenting with the signing component since that seems to be failing. + +name: Experiment with signing component + +on: + push: + branches: [ "main" ] + tags: + - '*' + pull_request: + branches: [ "main" ] + workflow_dispatch: + +jobs: + signing: + name: Signing practice + runs-on: ubuntu-latest + steps: + - name: Checkout code + uses: actions/checkout@v7 + - name: Set up JDK 21 + uses: actions/setup-java@v6.0.1 + with: + java-version: '21' + distribution: 'temurin' + - name: Setup Gradle + uses: gradle/actions/setup-gradle@v6 + - name: Sign with Gradle + run: | + echo "signingPassword -" + echo "$ORG_GRADLE_PROJECT_signingPassword" | wc + echo "signingKey -" + echo "$ORG_GRADLE_PROJECT_signingKey" | wc + echo "signingKeyId -" + echo "$ORG_GRADLE_PROJECT_signingKeyId" | wc + ./gradlew :api:signMavenJavaPublication -x test + env: + ORG_GRADLE_PROJECT_signingPassword: ${{ secrets.GPG_SIGNING_PASSPHRASE }} + ORG_GRADLE_PROJECT_signingKey: ${{ secrets.GPG_SIGNING_KEY }} + ORG_GRADLE_PROJECT_signingKeyId: ${{ secrets.GPG_SIGNING_KEY_ID }} From e6224c2f846fbab0353b711ed577a50abda98f77 Mon Sep 17 00:00:00 2001 From: A2 Geek Date: Sat, 26 Sep 2026 15:24:26 -0500 Subject: [PATCH 2/6] Update signing.yaml --- .github/workflows/signing.yaml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/signing.yaml b/.github/workflows/signing.yaml index 4c41137..7563317 100644 --- a/.github/workflows/signing.yaml +++ b/.github/workflows/signing.yaml @@ -36,5 +36,6 @@ jobs: ./gradlew :api:signMavenJavaPublication -x test env: ORG_GRADLE_PROJECT_signingPassword: ${{ secrets.GPG_SIGNING_PASSPHRASE }} - ORG_GRADLE_PROJECT_signingKey: ${{ secrets.GPG_SIGNING_KEY }} + ORG_GRADLE_PROJECT_signingKey: | + ${{ secrets.GPG_SIGNING_KEY }} ORG_GRADLE_PROJECT_signingKeyId: ${{ secrets.GPG_SIGNING_KEY_ID }} From 1ebebaa6896a5d0a8ba52b017c022936154da08f Mon Sep 17 00:00:00 2001 From: A2 Geek Date: Sat, 26 Sep 2026 15:29:07 -0500 Subject: [PATCH 3/6] Update signing.yaml --- .github/workflows/signing.yaml | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/.github/workflows/signing.yaml b/.github/workflows/signing.yaml index 7563317..d73fc55 100644 --- a/.github/workflows/signing.yaml +++ b/.github/workflows/signing.yaml @@ -27,6 +27,9 @@ jobs: uses: gradle/actions/setup-gradle@v6 - name: Sign with Gradle run: | + echo "GPG_SIGNING_KEY_BASE64 -" + echo $GPG_SIGNING_KEY_BASE64 | wc + export ORG_GRADLE_PROJECT_signingKey=$(echo "$GPG_SIGNING_KEY_BASE64" | base64 -d) echo "signingPassword -" echo "$ORG_GRADLE_PROJECT_signingPassword" | wc echo "signingKey -" @@ -36,6 +39,6 @@ jobs: ./gradlew :api:signMavenJavaPublication -x test env: ORG_GRADLE_PROJECT_signingPassword: ${{ secrets.GPG_SIGNING_PASSPHRASE }} - ORG_GRADLE_PROJECT_signingKey: | - ${{ secrets.GPG_SIGNING_KEY }} + GPG_SIGNING_KEY_BASE64: | + ${{ secrets.GPG_SIGNING_KEY_BASE64 }} ORG_GRADLE_PROJECT_signingKeyId: ${{ secrets.GPG_SIGNING_KEY_ID }} From e4749746bc99d07552bd1e3aeb636491dd8b1818 Mon Sep 17 00:00:00 2001 From: a2geek Date: Sat, 26 Sep 2026 15:45:41 -0500 Subject: [PATCH 4/6] Futzing. --- .github/workflows/signing.yaml | 6 +++--- api/build.gradle | 3 +++ 2 files changed, 6 insertions(+), 3 deletions(-) diff --git a/.github/workflows/signing.yaml b/.github/workflows/signing.yaml index d73fc55..ef8a1c1 100644 --- a/.github/workflows/signing.yaml +++ b/.github/workflows/signing.yaml @@ -29,7 +29,8 @@ jobs: run: | echo "GPG_SIGNING_KEY_BASE64 -" echo $GPG_SIGNING_KEY_BASE64 | wc - export ORG_GRADLE_PROJECT_signingKey=$(echo "$GPG_SIGNING_KEY_BASE64" | base64 -d) + echo "$GPG_SIGNING_KEY_BASE64" | base64 -d > .key + export ORG_GRADLE_PROJECT_signingKey=$(cat .key) echo "signingPassword -" echo "$ORG_GRADLE_PROJECT_signingPassword" | wc echo "signingKey -" @@ -39,6 +40,5 @@ jobs: ./gradlew :api:signMavenJavaPublication -x test env: ORG_GRADLE_PROJECT_signingPassword: ${{ secrets.GPG_SIGNING_PASSPHRASE }} - GPG_SIGNING_KEY_BASE64: | - ${{ secrets.GPG_SIGNING_KEY_BASE64 }} + GPG_SIGNING_KEY_BASE64: ${{ secrets.GPG_SIGNING_KEY_BASE64 }} ORG_GRADLE_PROJECT_signingKeyId: ${{ secrets.GPG_SIGNING_KEY_ID }} diff --git a/api/build.gradle b/api/build.gradle index d99ce1a..bb40032 100644 --- a/api/build.gradle +++ b/api/build.gradle @@ -107,8 +107,11 @@ publishing { signing { def signingKey = findProperty("signingKey") + System.out.printf("signingKey - %d\n", signingKey.length()) def signingPassword = findProperty("signingPassword") + System.out.printf("signingPassword - %d\n", signingPassword.length()) def signingKeyId = findProperty("signingKeyId") + System.out.printf("signingKeyId - %d\n", signingKeyId.length()) useInMemoryPgpKeys(signingKeyId, signingKey, signingPassword) sign publishing.publications.mavenJava } From dc9fb49f96c7c79f038f710e185ea1e38cca9a5d Mon Sep 17 00:00:00 2001 From: A2 Geek Date: Sat, 26 Sep 2026 15:49:51 -0500 Subject: [PATCH 5/6] Update signing.yaml --- .github/workflows/signing.yaml | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/.github/workflows/signing.yaml b/.github/workflows/signing.yaml index ef8a1c1..d30bdba 100644 --- a/.github/workflows/signing.yaml +++ b/.github/workflows/signing.yaml @@ -29,8 +29,7 @@ jobs: run: | echo "GPG_SIGNING_KEY_BASE64 -" echo $GPG_SIGNING_KEY_BASE64 | wc - echo "$GPG_SIGNING_KEY_BASE64" | base64 -d > .key - export ORG_GRADLE_PROJECT_signingKey=$(cat .key) + export ORG_GRADLE_PROJECT_signingKey=$(echo "$GPG_SIGNING_KEY_BASE64" | base64 -d) echo "signingPassword -" echo "$ORG_GRADLE_PROJECT_signingPassword" | wc echo "signingKey -" From c917cdf1ca3cce7d1d980410bdc10af78d842e52 Mon Sep 17 00:00:00 2001 From: a2geek Date: Sat, 26 Sep 2026 16:17:02 -0500 Subject: [PATCH 6/6] Removing debug details and merging into build. --- .github/workflows/build.yml | 6 +++-- .github/workflows/signing.yaml | 43 ---------------------------------- api/build.gradle | 3 --- 3 files changed, 4 insertions(+), 48 deletions(-) delete mode 100644 .github/workflows/signing.yaml diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 6a6bf21..924169a 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -136,12 +136,14 @@ jobs: - name: Setup Gradle uses: gradle/actions/setup-gradle@v6 - name: Publish with Gradle - run: ./gradlew build publish -x test + run: | + export ORG_GRADLE_PROJECT_signingKey=$(echo "$GPG_SIGNING_KEY_BASE64" | base64 -d) + ./gradlew build publish -x test env: ORG_GRADLE_PROJECT_ossrhUsername: ${{ secrets.OSSRH_USERNAME }} ORG_GRADLE_PROJECT_ossrhPassword: ${{ secrets.OSSRH_TOKEN }} ORG_GRADLE_PROJECT_signingPassword: ${{ secrets.GPG_SIGNING_PASSPHRASE }} - ORG_GRADLE_PROJECT_signingKey: ${{ secrets.GPG_SIGNING_KEY }} + GPG_SIGNING_KEY_BASE64: ${{ secrets.GPG_SIGNING_KEY_BASE64 }} ORG_GRADLE_PROJECT_signingKeyId: ${{ secrets.GPG_SIGNING_KEY_ID }} - name: Setup .netrc file uses: extractions/netrc@v3 diff --git a/.github/workflows/signing.yaml b/.github/workflows/signing.yaml deleted file mode 100644 index d30bdba..0000000 --- a/.github/workflows/signing.yaml +++ /dev/null @@ -1,43 +0,0 @@ -# Just experimenting with the signing component since that seems to be failing. - -name: Experiment with signing component - -on: - push: - branches: [ "main" ] - tags: - - '*' - pull_request: - branches: [ "main" ] - workflow_dispatch: - -jobs: - signing: - name: Signing practice - runs-on: ubuntu-latest - steps: - - name: Checkout code - uses: actions/checkout@v7 - - name: Set up JDK 21 - uses: actions/setup-java@v6.0.1 - with: - java-version: '21' - distribution: 'temurin' - - name: Setup Gradle - uses: gradle/actions/setup-gradle@v6 - - name: Sign with Gradle - run: | - echo "GPG_SIGNING_KEY_BASE64 -" - echo $GPG_SIGNING_KEY_BASE64 | wc - export ORG_GRADLE_PROJECT_signingKey=$(echo "$GPG_SIGNING_KEY_BASE64" | base64 -d) - echo "signingPassword -" - echo "$ORG_GRADLE_PROJECT_signingPassword" | wc - echo "signingKey -" - echo "$ORG_GRADLE_PROJECT_signingKey" | wc - echo "signingKeyId -" - echo "$ORG_GRADLE_PROJECT_signingKeyId" | wc - ./gradlew :api:signMavenJavaPublication -x test - env: - ORG_GRADLE_PROJECT_signingPassword: ${{ secrets.GPG_SIGNING_PASSPHRASE }} - GPG_SIGNING_KEY_BASE64: ${{ secrets.GPG_SIGNING_KEY_BASE64 }} - ORG_GRADLE_PROJECT_signingKeyId: ${{ secrets.GPG_SIGNING_KEY_ID }} diff --git a/api/build.gradle b/api/build.gradle index bb40032..d99ce1a 100644 --- a/api/build.gradle +++ b/api/build.gradle @@ -107,11 +107,8 @@ publishing { signing { def signingKey = findProperty("signingKey") - System.out.printf("signingKey - %d\n", signingKey.length()) def signingPassword = findProperty("signingPassword") - System.out.printf("signingPassword - %d\n", signingPassword.length()) def signingKeyId = findProperty("signingKeyId") - System.out.printf("signingKeyId - %d\n", signingKeyId.length()) useInMemoryPgpKeys(signingKeyId, signingKey, signingPassword) sign publishing.publications.mavenJava }