Questions tagged [maven-gpg-plugin]

19 questions
10
votes
2 answers

Is there anyway to sign maven package at github action workflows?

i'm running a GitHub Action workflow and have failing error when try to run maven install. it's required me to sign before i can install maven packages. here my workflow yml file : name: Github Action on: push: branches: - master …
7
votes
4 answers

maven-gpg-plugin failing with "Inappropriate ioctl for device" when running under Jenkins

When Jenkins triggers maven-gpg-plugin in a remote Linux shell it fails with gpg: signing failed: Inappropriate ioctl for device. This used to work until recently. I don't know what changed. I found a lot of online references suggesting export…
Gili
  • 86,244
  • 97
  • 390
  • 689
6
votes
1 answer

Gitlab-ci sign maven artifacts

I´m setting up a CI of my maven project in GitLab and I need to sign the jars before publishing them to maven central. (https://gitlab.com/awe-team/ade) I generate the key pair with gnuPgp and add the public key to my GitLab profile. Do I have a…
limkin
  • 315
  • 2
  • 10
3
votes
2 answers

Maven: Unable to execute gpg command

I am trying to add my school project to the maven repository. I am following this tutorial: https://blog.sonatype.com/2010/01/how-to-generate-pgp-signatures-with-maven/. I already generated a key and passphrase successfully and I have added the…
Crossoni
  • 193
  • 1
  • 10
2
votes
1 answer

Error while trying to automatically sign files with GPG using maven

I'm trying to deploy my project to the maven central repository but i can't resolve problem with Error:Sources Validation. I've installed gpg and went through the instructions: Adding a GPG key and Apache Maven signed components When i try to run…
Nikita Ryanov
  • 1,520
  • 3
  • 17
  • 34
1
vote
1 answer

GPG key skipped during maven release

I am following all the instructions listed here to release my project to sonatype repo: https://dzone.com/articles/publish-your-artifacts-to-maven-central But still getting the following error during signing artifacts [INFO] ---…
Prashant
  • 153
  • 9
1
vote
1 answer

Maven GPG plugin 3.0.0 is missing

Here is maven-gpg-plugin version 3.0.0 official page: http://maven.apache.org/components/plugins-archives/maven-gpg-plugin-LATEST/download.cgi However: the download links not working Maven central shows that the latest version of plugin is 1.6 Is…
vve1der
  • 60
  • 5
1
vote
1 answer

can't seem to publish my updated pgp key for Travis-CI to pick it up

I've made some releases to Maven central for my project over the years, using Travis-CI. The last release was 2 months ago, and I proceeded as I usually did. But today, for some reason, I am getting this error, while I didn't change anything in my…
Vincent F
  • 6,523
  • 7
  • 37
  • 79
1
vote
1 answer

Pass in List-Parameter to Maven using the CLI (gpg:sign-and-deploy-file)

I'm currently stuck when deploying a single file to my Maven Registry. I use this goal to deploy to files using the command line: https://maven.apache.org/plugins/maven-gpg-plugin/sign-and-deploy-file-mojo.html I need to pass in 2…
Leo Hilbert
  • 395
  • 2
  • 12
1
vote
1 answer

Maven gpg: skipped "39619BDF": No secret key

I have GPG correctly configured and MAVEN also referring the correct KEY. This has always worked. And now some how Maven is always giving the following error: gpg: skipped "39619BDF": No secret key gpg: signing failed: No secret key (I am not sure…
Miguel Gamboa
  • 8,855
  • 7
  • 47
  • 94
0
votes
1 answer

Parent Pom Does Not Get Signed on Maven Release

I'm currently trying to release a project (https://github.com/DaGeRe/KoPeMe) which is built by maven. The last release worked successfully: https://repo1.maven.org/maven2/de/dagere/kopeme/kopeme-parent/1.3.6/ with commit…
David Georg Reichelt
  • 963
  • 1
  • 15
  • 36
0
votes
0 answers

How to use GnuPG in Jenkins for publishing Artifacts to Sonatype Nexus

I want to send the Maven project to Sonatype Oss for publishing an artifact in Maven Central. Two important files to send the project are root_of_project/pom.xml and admin/.m2/settings.xml In pom.xml Nexus tags:
0
votes
0 answers

generate temp gpg key non interactively (unattended mode)

Specific problem: Unable to create required files in gnupg home directory, so gpg couldn't connect the agent. Additional details: With the help of gnupg docs, I generated a temporary key. - name: gpg key generation - transient run: > …
Janardhan
  • 51
  • 6
0
votes
1 answer

gpg: can't connect to the agent: Invalid value passed to IPC

Dev environment: Mingw64 that came with Git Bash. I am trying to sign with maven-gpg-plugin: [INFO] --- maven-gpg-plugin:1.6:sign (sign-release-artifacts) @ systemds --- [INFO] gpg: keybox 'F:\Repo\systemds/pubring.kbx' created [INFO] gpg: can't…
Janardhan
  • 51
  • 6
0
votes
1 answer

VScode maven not executing plugins

I am trying to get my library uploaded to the maven central repository using VScode. In order to meet the requierments for that, I have a bunch of plugins configured in my pom.xml file. Here are all the plugins:
1
2