[ci] Handle gpg passphrase as env var

Author: adangel

.ci/build.sh

@@ -67,10 +67,12 @@ function snapshot_build() {
     pmd_ci_log_group_start "Snapshot Build: ${PMD_CI_MAVEN_PROJECT_VERSION}"
         pmd_ci_log_info "This is a snapshot build on branch ${PMD_CI_BRANCH} (version: ${PMD_CI_MAVEN_PROJECT_VERSION})"
 
+        export MAVEN_GPG_PASSPHRASE="${CI_SIGN_PASSPHRASE}"
         ${xvfb_cmd} ./mvnw clean verify \
             --show-version --errors --batch-mode --no-transfer-progress \
-            --activate-profiles sign \
+            --activate-profiles sign_env \
             -Dtarget.platform=${TARGET_PLATFORM}
+        unset MAVEN_GPG_PASSPHRASE
 
         # Upload update site to sourceforge
         local qualifiedVersion
@@ -117,10 +119,12 @@ function release_build() {
     pmd_ci_log_group_start "Release Build: ${PMD_CI_MAVEN_PROJECT_VERSION}"
         pmd_ci_log_info "This is a release build for tag ${PMD_CI_TAG} (version: ${PMD_CI_MAVEN_PROJECT_VERSION})"
 
+        export MAVEN_GPG_PASSPHRASE="${CI_SIGN_PASSPHRASE}"
         ${xvfb_cmd} ./mvnw clean verify \
             --show-version --errors --batch-mode --no-transfer-progress \
-            --activate-profiles sign \
+            --activate-profiles sign_env \
             -Dtarget.platform=${TARGET_PLATFORM}
+        unset MAVEN_GPG_PASSPHRASE
 
     pmd_ci_log_group_end
 

net.sourceforge.pmd.eclipse.p2updatesite/pom.xml

@@ -39,7 +39,7 @@
 
     <profiles>
       <profile>
-        <id>sign</id>
+        <id>sign_env</id>
         <build>
           <plugins>
             <plugin>

pom.xml

@@ -338,6 +338,7 @@
           <version>${tycho.version}</version>
           <configuration>
             <bestPractices>true</bestPractices>
+            <useAgent>false</useAgent>
           </configuration>
         </plugin>
         <plugin>