Signs the artifacts in the 'shadow' publication

Author: purejava

.github/workflows/build_and_release_github.yml

@@ -35,7 +35,7 @@ jobs:
           GPG_SIGNING_KEY_PW: ${{ secrets.GPG_PASSPHRASE }}
 
       - name: Build package
-        run: ./gradlew clean build
+        run: ./gradlew clean build signShadowPublication
         env:
           PACKAGES_USER: ${{ secrets.PACKAGES_USER }}
           PACKAGES_ACCESS_TOKEN: ${{ secrets.PACKAGES_ACCESS_TOKEN }}

build.gradle.kts

@@ -119,6 +119,11 @@ signing {
     sign(publishing.publications["shadow"])
 }
 
+tasks.named("signShadowPublication") {
+    dependsOn(tasks.named("jar"))
+    dependsOn(tasks.named("shadowJar"))
+}
+
 githubRelease {
     token(releaseGradlePluginToken)
     tagName = project.version.toString()