chore: fix Maven publishing GHA

Signed-off-by: BRIAN GLEESON <Brian.Gleeson@ie.ibm.com>

Author: briangleeson

.cra/.cveignore

@@ -78,14 +78,12 @@ jobs:
           java-version: '11'
           distribution: 'temurin'
           cache: 'maven'
-
-      - name: Import GPG key
-        env:
-          GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
-          GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
-        run: |
-          echo "$GPG_PRIVATE_KEY" | base64 --decode | gpg --batch --import
-          gpg --list-secret-keys --keyid-format LONG
+          server-id: central
+          server-username: CP_USERNAME
+          server-password: CP_PASSWORD
+          # Import GPG key into build agent's local keystore
+          gpg-private-key: ${{ secrets.GPG_PRIVATE_KEY }}
+          gpg-passphrase: ${{ secrets.GPG_PASSPHRASE }}
 
       - name: Set Maven version
         run: mvn versions:set -DnewVersion=${{ github.ref_name }} -DgenerateBackupPoms=false

.github/workflows/publish.yml

@@ -3,7 +3,7 @@
     "files": "^.secrets.baseline$",
     "lines": null
   },
-  "generated_at": "2025-08-08T16:27:26Z",
+  "generated_at": "2026-03-09T16:18:57Z",
   "plugins_used": [
     {
       "name": "AWSKeyDetector"
@@ -77,6 +77,16 @@
     }
   ],
   "results": {
+    ".github/workflows/publish.yml": [
+      {
+        "hashed_secret": "b8fb27ac44ff8a4d5237588af39c5fb65bbedc3f",
+        "is_secret": false,
+        "is_verified": false,
+        "line_number": 83,
+        "type": "Secret Keyword",
+        "verified_result": null
+      }
+    ],
     "modules/cd-toolchain/src/test/java/com/ibm/cloud/continuous_delivery/cd_toolchain/v2/CdToolchainTest.java": [
       {
         "hashed_secret": "8d204a8e6f883c0691207b5eed52ab2889568f71",
@@ -118,7 +128,7 @@
       }
     ]
   },
-  "version": "0.13.1+ibm.60.dss",
+  "version": "0.13.1+ibm.64.dss",
   "word_list": {
     "file": null,
     "hash": null