simplify GPG credential passing via environment variables in publish workflows

Author: jcpitre

.github/workflows/deploy-snapshot.yml

@@ -62,24 +62,12 @@ jobs:
             echo "MAVEN_CENTRAL_PORTAL_TOKEN_USERNAME=$MVN_USER"
             echo "MAVEN_CENTRAL_PORTAL_TOKEN_PASSWORD=$MVN_PASS"
           } >> "$GITHUB_ENV"
-      - name: Setup GPG and JReleaser credentials
-        run: |
-          echo "$MAVEN_GPG_PRIVATE_KEY" | gpg --batch --import
-          GPG_KEY_ID=$(gpg --list-secret-keys --keyid-format LONG | grep '^sec' | awk '{print $2}' | cut -d'/' -f2 | head -1)
-          {
-            echo "JRELEASER_GPG_PUBLIC_KEY<<GPG_EOF"
-            gpg --armor --export "$GPG_KEY_ID"
-            echo "GPG_EOF"
-            echo "JRELEASER_GPG_SECRET_KEY<<GPG_EOF"
-            gpg --armor --export-secret-keys "$GPG_KEY_ID"
-            echo "GPG_EOF"
-            echo "JRELEASER_GPG_PASSPHRASE=$MAVEN_GPG_PASSPHRASE"
-            echo "JRELEASER_NEXUS2_MAVEN_CENTRAL_USERNAME=$MAVEN_CENTRAL_PORTAL_TOKEN_USERNAME"
-            echo "JRELEASER_NEXUS2_MAVEN_CENTRAL_PASSWORD=$MAVEN_CENTRAL_PORTAL_TOKEN_PASSWORD"
-          } >> "$GITHUB_ENV"
       - name: Stage artifacts
         run: mvn deploy -Ppublication -Dprettier.skip=true
       - name: Publish snapshot to Maven Central
+        env:
+          JRELEASER_GPG_PASSPHRASE: ${{ env.MAVEN_GPG_PASSPHRASE }}
+          JRELEASER_GPG_SECRET_KEY: ${{ env.MAVEN_GPG_PRIVATE_KEY }}
         run: mvn jreleaser:deploy -Djreleaser.output.directory=out
       - name: Upload JReleaser output
         if: always()