Skip to content

Conversation

@nicklasl
Copy link
Member

@nicklasl nicklasl commented Oct 24, 2025

What was problematic before was party the fact that we had multi line secrets that we tried to mount as secrets in docker.

This approach writes them to tmp files in github workflows first and then mounts them as secret-files in docker instead.

Additionally the PR bumps the maven-gpg-plugin to a newer version where we can use MAVEN_GPG_PASSPHRASE env var.
Also bumping the docker syntax allows us to mount the gpg password secret directly to said environment var in docker.

remove thing from pom

fixups
Copy link
Contributor

@andreas-karlsson andreas-karlsson left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nice!

@nicklasl nicklasl merged commit 9a0f2ed into main Nov 3, 2025
12 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants