From db4ad1a78d93b1fe6f8e64421e08735bcbd21ae4 Mon Sep 17 00:00:00 2001
From: thunderbiscuit <thunderbiscuit@protonmail.com>
Date: Wed, 31 Aug 2022 09:41:52 -0400
Subject: [PATCH] Sign bdk-jvm artifact in CI

---
 .github/workflows/publish-jvm.yaml | 12 +++++-------
 build.gradle.kts                   | 13 +++++++------
 jvm/build.gradle.kts               |  5 ++++-
 3 files changed, 16 insertions(+), 14 deletions(-)

diff --git a/.github/workflows/publish-jvm.yaml b/.github/workflows/publish-jvm.yaml
index 7d1c269..5d14c1f 100644
--- a/.github/workflows/publish-jvm.yaml
+++ b/.github/workflows/publish-jvm.yaml
@@ -85,14 +85,12 @@ jobs:
           name: artifact
           path: ./jvm/src/main/resources/
 
-      - name: Upload everything in jvm/src/
-        uses: actions/upload-artifact@v3
-        with:
-          name: final-src-directory
-          path: /home/runner/work/bdk-kotlin/bdk-kotlin/jvm/
-
       - name: Publish to MavenLocal
-        run: ./gradlew :jvm:publishToMavenLocal --exclude-task signMavenPublication
+        env:
+          ORG_GRADLE_PROJECT_signingKeyId: ${{ secrets.PGP_KEY_ID }}
+          ORG_GRADLE_PROJECT_signingKey: ${{ secrets.PGP_SECRET_KEY }}
+          ORG_GRADLE_PROJECT_signingPassword: ${{ secrets.PGP_PASSPHRASE }}
+        run: ./gradlew :jvm:publishToMavenLocal
 
       # Copy/paste this artifact in your local Maven repository at ~/.m2/repository/
       - name: Upload library from MavenLocal
diff --git a/build.gradle.kts b/build.gradle.kts
index 8583631..af94fa1 100644
--- a/build.gradle.kts
+++ b/build.gradle.kts
@@ -16,12 +16,13 @@ plugins {
     id("org.jetbrains.dokka") version "1.6.10"
 }
 
-signing {
-    val signingKey: String? by project
-    val signingPassword: String? by project
-    useInMemoryPgpKeys(signingKey, signingPassword)
-    sign(publishing.publications)
-}
+// signing {
+//     val signingKeyId: String? by project
+//     val signingKey: String? by project
+//     val signingPassword: String? by project
+//     useInMemoryPgpKeys(signingKeyId, signingKey, signingPassword)
+//     sign(publishing.publications)
+// }
 
 // does this need to be defined here? Not sure
 // it used to be defined in the nexusPublishing block but is not required
diff --git a/jvm/build.gradle.kts b/jvm/build.gradle.kts
index 385fbac..effe260 100644
--- a/jvm/build.gradle.kts
+++ b/jvm/build.gradle.kts
@@ -93,7 +93,10 @@ afterEvaluate {
 }
 
 signing {
-    useGpgCmd()
+    val signingKeyId: String? by project
+    val signingKey: String? by project
+    val signingPassword: String? by project
+    useInMemoryPgpKeys(signingKeyId, signingKey, signingPassword)
     sign(publishing.publications)
 }