TeamCity: configure signing

Signed-off-by: Christoph Obexer <[email protected]>
gradle · Sep 10, 2024 · 51f06e1 · 51f06e1
1 parent 918acf7
commit 51f06e1
Show file tree

Hide file tree

Showing 2 changed files with 16 additions and 1 deletion.
diff --git a/.teamcity/src/main/kotlin/Publish.kt b/.teamcity/src/main/kotlin/Publish.kt
@@ -31,8 +31,10 @@ class Publish(build: Build, tests: TestTrigger) : BaseBuildType({
         param("env.GRADLE_INTERNAL_REPO_URL", "%gradle.internal.repository.url%")
         param("ARTIFACTORY_USERNAME", "%gradle.internal.repository.build-tool.publish.username%")
         password("ARTIFACTORY_PASSWORD", "%gradle.internal.repository.build-tool.publish.password%", display = ParameterDisplay.HIDDEN)
-        param("env.ORG_GRADLE_PROJECT_publishApiKey", "%ARTIFACTORY_PASSWORD%")
+        password("env.ORG_GRADLE_PROJECT_publishApiKey", "%ARTIFACTORY_PASSWORD%")
         param("env.ORG_GRADLE_PROJECT_publishUserName", "%ARTIFACTORY_USERNAME%")
+        param("env.PGP_SIGNING_KEY", "%pgpSigningKey%")
+        password("env.PGP_SIGNING_KEY_PASSPHRASE", "%pgpSigningPassphrase%")
     }
 
     steps {

diff --git a/build.gradle.kts b/build.gradle.kts
@@ -10,6 +10,7 @@ plugins {
     id("maven-publish")
     id("gradlebuild.git-version")
     id("gradlebuild.zig")
+    id("signing")
 }
 
 group = "org.gradle.fileevents"
@@ -198,3 +199,15 @@ publishing {
         }
     }
 }
+
+signing {
+    useInMemoryPgpKeys(
+        System.getenv("PGP_SIGNING_KEY"),
+        System.getenv("PGP_SIGNING_KEY_PASSPHRASE")
+    )
+    if (!System.getenv("PGP_SIGNING_KEY_PASSPHRASE").isNullOrBlank()) {
+        publishing.publications.configureEach {
+            signing.sign(this)
+        }
+    }
+}