ci: differentiate gpg passphrases

dargmuesli · dargmuesli · commit 55111d7cdf48 · 2021-11-06T18:08:59.000+01:00
diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml
@@ -21,10 +21,11 @@ jobs:
       - name: Upload code coverage
         uses: codecov/codecov-action@v2
       - name: Release
-        if: startsWith(github.ref, 'refs/tags/') && ${{ matrix.java }} == 17
+        if: startsWith(github.ref, 'refs/tags/') && matrix.java == 17
         env:
           GPG_KEY_NAME: C546418B
-          GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
+          GPG_PASSPHRASE_KEY: ${{ secrets.GPG_PASSPHRASE_KEY }}
+          GPG_PASSPHRASE_FILE: ${{ secrets.GPG_PASSPHRASE_FILE }}
           SONATYPE_PASSWORD: ${{ secrets.SONATYPE_PASSWORD }}
           SONATYPE_USERNAME: ${{ secrets.SONATYPE_USERNAME }}
         run: |
diff --git a/ci/.m2.settings.xml b/ci/.m2.settings.xml
@@ -15,7 +15,7 @@
             </activation>
             <properties>
                 <gpg.keyname>${env.GPG_KEY_NAME}</gpg.keyname>
-                <gpg.passphrase>${env.GPG_PASSPHRASE}</gpg.passphrase>
+                <gpg.passphrase>${env.GPG_PASSPHRASE_KEY}</gpg.passphrase>
             </properties>
         </profile>
     </profiles>
diff --git a/ci/before-deploy.sh b/ci/before-deploy.sh
@@ -1,3 +1,3 @@
 #!/usr/bin/env bash
-echo "$GPG_PASSPHRASE" | gpg --batch --yes --passphrase-fd 0 --output ci/codesigning.asc --decrypt ci/codesigning.asc.enc
+echo "$GPG_PASSPHRASE_FILE" | gpg --batch --yes --passphrase-fd 0 --output ci/codesigning.asc --decrypt ci/codesigning.asc.enc
 gpg --batch --fast-import ci/codesigning.asc
