Skip to content

Update how passphrase is passed to GPG #760

Closed
Feature
#1123
Closed
Update how passphrase is passed to GPG#760
Feature
#1123
Labels
feature requestNew feature or request to improve the current logicmavenMaven settings, toolchains, and publishing auth

Description

@cowwoc
cowwoc
opened on Mar 3, 2025

Description:
Per https://maven.apache.org/plugins/maven-gpg-plugin/sign-mojo.html#passphraseenvname the mechanism currently used by this task is deprecated. This is reenforced by the fact that https://maven.apache.org/plugins/maven-gpg-plugin/sign-mojo.html#passphrase will fail if <bestPractices> is true.

The recommended way to pass the passphrase is now https://maven.apache.org/plugins/maven-gpg-plugin/sign-mojo.html#passphraseEnvName

Task version:
v4

Expected behavior:

  • Stop writing gpg.passphrase to server.xml.
  • Set gpg.passphraseEnvName if the user specifies a value other than MAVEN_GPG_PASSPHRASE

Activity

  1. cowwoc
    added
    bugSomething isn't working
    needs triage
    on Mar 3, 2025
  2. v-priya-kinthali
    removed
    needs triage
    on Mar 4, 2025

  3. v-priya-kinthali commented on Mar 4, 2025

    @v-priya-kinthali
    v-priya-kinthali
    on Mar 4, 2025
    Contributor

    Hello @cowwoc👋,
    Thank you for reporting this issue. We will investigate it and get back to you as soon as we have some feedback.

  4. v-priyagupta108
    self-assigned this
    on Mar 5, 2025

  5. v-priyagupta108 commented on Mar 11, 2025

    @v-priyagupta108
    v-priyagupta108
    on Mar 11, 2025
    Contributor

    Hi @cowwoc 👋,
    Thank you for your valuable insights! We’ll explore the possibility of implementing these changes to enhance the action and consider your suggestion for future improvements. In the meantime, please feel free to share any additional details or suggestions you may have!

  6. v-priyagupta108
    added
    feature requestNew feature or request to improve the current logic
    and removed
    bugSomething isn't working
    on Mar 20, 2025
  7. v-priyagupta108
    removed their assignment
    on Mar 20, 2025
  8. brunoborges
    added
    mavenMaven settings, toolchains, and publishing auth
    on Jun 22, 2026
  9. brunoborges
    added the
    Feature
    issue type on Jun 23, 2026
  10. brunoborges
    closed this as completedin #1123on Jul 15, 2026
  11. pull
    added a commit that references this issue on Jul 15, 2026

    Use gpg.passphraseEnvName instead of the deprecated gpg.passphrase se…

    7d48588
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    feature requestNew feature or request to improve the current logicmavenMaven settings, toolchains, and publishing auth

    Type

    Feature

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions