File tree Expand file tree Collapse file tree 4 files changed +6
-303
lines changed Expand file tree Collapse file tree 4 files changed +6
-303
lines changed Original file line number Diff line number Diff line change 55Since 7.9.0, the plugin is signed with the same GPG key, that is used to sign the main PMD artifacts
66for maven central.
77
8- See < https://github.com/ pmd/build-tools/blob/main/scripts/files/release-signing-key-2EFA55D0785C31F956F2F87EA0B5CA1A4E086838-public.asc > .
8+ See < https://docs. pmd-code.org/latest/pmd_userdocs_signed_releases.html > .
99
1010Tycho's [ GPG Plugin] ( https://tycho.eclipseprojects.io/doc/latest/tycho-gpg-plugin/sign-p2-artifacts-mojo.html )
1111is used for that.
@@ -14,8 +14,8 @@ There is no need anymore to use jar signer and use a real Let's Encrypt certific
1414
1515** How it works:**
1616
17- * During build setup, the private gpg key is imported from the environment variable ` PMD_CI_GPG_PRIVATE_KEY `
18- which is a secret in GitHub Action. This environment variable is used by ` pmd_ci_setup_secrets_private_env `
19- which is called by ` build.sh ` (but not for pull requests) .
17+ * The GPG key is only needed for the two workflows ` publish-snapshot.yml ` and ` publish-releases.yml `
18+ * The key is setup with setup-java, the private gpg key is imported from the (secret) environment
19+ variable ` PMD_CI_GPG_PRIVATE_KEY ` .
2020* The gpg plugin uses the environment variable ` MAVEN_GPG_PASSPHRASE ` for the passphrase. This is
2121 configured as well as a secret. The tycho gpg plugin is activated only when profile ` sign ` is activated.
Load Diff This file was deleted.
Load Diff This file was deleted.
Original file line number Diff line number Diff line change @@ -155,7 +155,7 @@ jobs:
155155 run : |
156156 uploadUrl="${PMD_SF_USER}@web.sourceforge.net:/home/frs/project/pmd/pmd-eclipse/zipped/"
157157 rsync -avh \
158- " net.sourceforge.pmd.eclipse.p2updatesite-*.zip" \
158+ net.sourceforge.pmd.eclipse.p2updatesite-*.zip \
159159 "${uploadUrl}/net.sourceforge.pmd.eclipse.p2updatesite-SNAPSHOT.zip"
160160
161161 - name : Cleanup ssh
@@ -206,7 +206,7 @@ jobs:
206206 qualifiedVersion="${qualifiedVersion#net.sourceforge.pmd.eclipse.p2updatesite-}"
207207
208208 rm -rf snapshot
209- unzip -q -d snapshot " ../net.sourceforge.pmd.eclipse.p2updatesite-*.zip"
209+ unzip -q -d snapshot ../net.sourceforge.pmd.eclipse.p2updatesite-*.zip
210210 echo "This is a Eclipse Update Site for the [PMD Eclipse Plugin](https://github.com/pmd/pmd-eclipse-plugin/) ${VERSION}.
211211
212212 Use <https://pmd.github.io/pmd-eclipse-plugin-p2-site/snapshot/> to install the plugin with the Eclipse Update Manager.
You can’t perform that action at this time.
0 commit comments