build(release): sign tag

Signed-off-by: Ruben Romero Montes <rromerom@redhat.com>
RHEcosystemAppEng · Nov 15, 2023 · 84fa302 · 84fa302
1 parent e83f722
commit 84fa302
Show file tree

Hide file tree

Showing 4 changed files with 78 additions and 50 deletions.
diff --git a/.flattened-pom.xml b/.flattened-pom.xml
@@ -0,0 +1,62 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd" xmlns="http://maven.apache.org/POM/4.0.0"
+    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
+  <modelVersion>4.0.0</modelVersion>
+  <groupId>com.redhat.ecosystemappeng</groupId>
+  <artifactId>exhort-api-spec</artifactId>
+  <version>1.0.9</version>
+  <name>Exhort Java API</name>
+  <description>Red Hat Trusted Profile Analizer :: Exhort :: Java API</description>
+  <url>https://github.com/RHEcosystemAppEng/exhort-api-spec</url>
+  <licenses>
+    <license>
+      <name>Apache-2.0</name>
+      <url>https://www.apache.org/licenses/LICENSE-2.0.txt</url>
+      <distribution>repo</distribution>
+    </license>
+  </licenses>
+  <scm>
+    <connection>scm:git:git@github.com:RHEcosystemAppEng/exhort-api-spec.git</connection>
+    <developerConnection>scm:git:git@github.com:RHEcosystemAppEng/exhort-api-spec.git</developerConnection>
+    <tag>v1.0.0</tag>
+    <url>https://github.com/RHEcosystemAppEng/exhort-api-spec</url>
+  </scm>
+  <dependencies>
+    <dependency>
+      <groupId>com.github.package-url</groupId>
+      <artifactId>packageurl-java</artifactId>
+      <version>1.4.1</version>
+      <scope>compile</scope>
+    </dependency>
+    <dependency>
+      <groupId>com.fasterxml.jackson.core</groupId>
+      <artifactId>jackson-annotations</artifactId>
+      <version>2.15.2</version>
+      <scope>compile</scope>
+    </dependency>
+    <dependency>
+      <groupId>com.fasterxml.jackson.core</groupId>
+      <artifactId>jackson-core</artifactId>
+      <version>2.15.2</version>
+      <scope>compile</scope>
+    </dependency>
+    <dependency>
+      <groupId>com.fasterxml.jackson.core</groupId>
+      <artifactId>jackson-databind</artifactId>
+      <version>2.15.2</version>
+      <scope>compile</scope>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.annotation</groupId>
+      <artifactId>jakarta.annotation-api</artifactId>
+      <version>2.1.1</version>
+      <scope>compile</scope>
+    </dependency>
+    <dependency>
+      <groupId>org.junit.jupiter</groupId>
+      <artifactId>junit-jupiter-api</artifactId>
+      <version>5.10.0</version>
+      <scope>compile</scope>
+    </dependency>
+  </dependencies>
+</project>
diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
diff --git a/perform_release.sh b/perform_release.sh
@@ -13,7 +13,7 @@ print_message() {
 remove_snapshot() {
     print_message "Removing snapshot from pom"
     mvn -B versions:set -DremoveSnapshot -DgenerateBackupPoms=false
-    mvn clean verify -Prelease -Psigned
+    mvn clean deploy -Ppublish -Prelease
 }
 
 git_push() {
@@ -35,7 +35,7 @@ git_commit() {
 git_tag() {
     version=`mvn help:evaluate -Dexpression=project.version -q -DforceStdout`
     print_message "Creating tag v${version}"
-    git tag v${version}
+    git tag -s v${version} -m "v${version}"
     git_push v${version}
 }
 
@@ -56,7 +56,7 @@ perform_release() {
     git_tag
 
     next_version ${1:-}
-    mvn -B clean package
+    mvn -B clean package -Ppublish
     git_commit "updated next development version"
 }
 

diff --git a/pom.xml b/pom.xml
@@ -564,26 +564,6 @@ limitations under the License.]]>
   </build>
 
   <profiles>
-    <profile>
-      <id>signed</id>
-      <build>
-        <plugins>
-          <plugin>
-            <groupId>org.apache.maven.plugins</groupId>
-            <artifactId>maven-gpg-plugin</artifactId>
-            <executions>
-              <execution>
-                <id>sign-artifacts</id>
-                <phase>verify</phase>
-                <goals>
-                  <goal>sign</goal>
-                </goals>
-              </execution>
-            </executions>
-          </plugin>
-        </plugins>
-      </build>
-    </profile>
     <profile>
       <id>publish</id>
       <build>
@@ -632,6 +612,19 @@ limitations under the License.]]>
       <id>release</id>
       <build>
         <plugins>
+          <plugin>
+            <groupId>org.apache.maven.plugins</groupId>
+            <artifactId>maven-gpg-plugin</artifactId>
+            <executions>
+              <execution>
+                <id>sign-artifacts</id>
+                <phase>verify</phase>
+                <goals>
+                  <goal>sign</goal>
+                </goals>
+              </execution>
+            </executions>
+          </plugin>
           <plugin>
             <groupId>com.github.eirslett</groupId>
             <artifactId>frontend-maven-plugin</artifactId>