build(release): sign tag

Signed-off-by: Ruben Romero Montes <rromerom@redhat.com>
RHEcosystemAppEng · Nov 15, 2023 · bed9d77 · bed9d77
1 parent e83f722
commit bed9d77
Show file tree

Hide file tree

Showing 3 changed files with 16 additions and 50 deletions.
diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
diff --git a/perform_release.sh b/perform_release.sh
@@ -13,7 +13,7 @@ print_message() {
 remove_snapshot() {
     print_message "Removing snapshot from pom"
     mvn -B versions:set -DremoveSnapshot -DgenerateBackupPoms=false
-    mvn clean verify -Prelease -Psigned
+    mvn clean deploy -Ppublish -Prelease
 }
 
 git_push() {
@@ -35,7 +35,7 @@ git_commit() {
 git_tag() {
     version=`mvn help:evaluate -Dexpression=project.version -q -DforceStdout`
     print_message "Creating tag v${version}"
-    git tag v${version}
+    git tag -s v${version}
     git_push v${version}
 }
 
@@ -56,7 +56,7 @@ perform_release() {
     git_tag
 
     next_version ${1:-}
-    mvn -B clean package
+    mvn -B clean package -Ppublish
     git_commit "updated next development version"
 }
 

diff --git a/pom.xml b/pom.xml
@@ -564,26 +564,6 @@ limitations under the License.]]>
   </build>
 
   <profiles>
-    <profile>
-      <id>signed</id>
-      <build>
-        <plugins>
-          <plugin>
-            <groupId>org.apache.maven.plugins</groupId>
-            <artifactId>maven-gpg-plugin</artifactId>
-            <executions>
-              <execution>
-                <id>sign-artifacts</id>
-                <phase>verify</phase>
-                <goals>
-                  <goal>sign</goal>
-                </goals>
-              </execution>
-            </executions>
-          </plugin>
-        </plugins>
-      </build>
-    </profile>
     <profile>
       <id>publish</id>
       <build>
@@ -632,6 +612,19 @@ limitations under the License.]]>
       <id>release</id>
       <build>
         <plugins>
+          <plugin>
+            <groupId>org.apache.maven.plugins</groupId>
+            <artifactId>maven-gpg-plugin</artifactId>
+            <executions>
+              <execution>
+                <id>sign-artifacts</id>
+                <phase>verify</phase>
+                <goals>
+                  <goal>sign</goal>
+                </goals>
+              </execution>
+            </executions>
+          </plugin>
           <plugin>
             <groupId>com.github.eirslett</groupId>
             <artifactId>frontend-maven-plugin</artifactId>