Merge pull request #33 from avianlabs/signed_maven_artifacts

publish signed artifacts

Author: wiyarmir

.github/workflows/main_branch.yaml

@@ -45,9 +45,20 @@ jobs:
 
       - name: Run tests
         run: ./gradlew check
+        
+      - name: Import GPG key
+        uses: crazy-max/ghaction-import-gpg@v6
+        with:
+          gpg_private_key: ${{ secrets.GPG_KEY }}
+          passphrase: ${{ secrets.GPG_KEY_PASSWORD }}
 
-      - name: Build packages
-        run: ./gradlew publishToMavenLocal
+      - name: Publish to maven central
+        env:
+          ORG_GRADLE_PROJECT_mavenCentralUsername: ${{ secrets.SONATYPE_USER }}
+          ORG_GRADLE_PROJECT_mavenCentralPassword: ${{ secrets.SONATYPE_PASSWORD }}
+          ORG_GRADLE_PROJECT_signingGnupgKeyName: ${{ secrets.GPG_KEY_ID }}
+          ORG_GRADLE_PROJECT_signingGnupgPassphrase: ${{ secrets.GPG_KEY_PASSWORD }}
+        run: ./gradlew publishAllPublicationsToMavenCentralRepository
 
       - name: Bundle the failed build report
         if: failure()

.github/workflows/pull_request.yaml

@@ -48,7 +48,7 @@ jobs:
         run: ./gradlew check
 
       - name: Build packages
-        run: ./gradlew publishToMavenLocal
+        run: ./gradlew -PsignPublications=false publishToMavenLocal
 
       - name: Bundle the failed build report
         if: failure()

.github/workflows/release.yaml

@@ -0,0 +1,66 @@
+name: 'Release'
+
+on:
+  release:
+    types:
+      - created
+
+permissions:
+  pull-requests: write
+  deployments: write
+  checks: write
+  statuses: write
+  contents: write
+
+jobs:
+  build:
+    name: Build Project
+    runs-on: macos-14
+    env:
+      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          submodules: 'true'
+
+      - uses: actions/setup-java@v4
+        with:
+          java-version: '18'
+          distribution: 'temurin'
+
+      - name: Setup Gradle
+        uses: gradle/actions/setup-gradle@v3
+
+      - name: Cache konan
+        uses: actions/cache@v4
+        with:
+          path: ~/.konan
+          key: ${{ runner.os }}-konan-${{ hashFiles('**/*.gradle*') }}-${{ hashFiles('**/gradle/wrapper/gradle-wrapper.properties') }}
+          restore-keys: ${{ runner.os }}-konan-
+
+      - name: Import GPG key
+        uses: crazy-max/ghaction-import-gpg@v6
+        with:
+          gpg_private_key: ${{ secrets.GPG_KEY }}
+          passphrase: ${{ secrets.GPG_KEY_PASSWORD }}
+
+      - name: Publish to maven central
+        env:
+          ORG_GRADLE_PROJECT_mavenCentralUsername: ${{ secrets.SONATYPE_USER }}
+          ORG_GRADLE_PROJECT_mavenCentralPassword: ${{ secrets.SONATYPE_PASSWORD }}
+          ORG_GRADLE_PROJECT_signingGnupgKeyName: ${{ secrets.GPG_KEY_ID }}
+          ORG_GRADLE_PROJECT_signingGnupgPassphrase: ${{ secrets.GPG_KEY_PASSWORD }}
+        run: ./gradlew -Psnapshot=false publishAndReleaseToMavenCentral --no-configuration-cache
+
+      - name: Bundle the failed build report
+        if: failure()
+        run: find ./build -type d -name 'reports' | zip -@ -r build-reports.zip
+
+      - name: Upload the failed build report
+        if: failure()
+        uses: actions/upload-artifact@v2
+        with:
+          name: error-report
+          path: build-reports.zip
+          retention-days: 7