Skip to content

Commit af14049

Browse files
authored
chore: use github secrets for maven publish (#449)
1 parent 8d79ee5 commit af14049

1 file changed

Lines changed: 4 additions & 19 deletions

File tree

.github/workflows/release_maven.yml

Lines changed: 4 additions & 19 deletions
Original file line numberDiff line numberDiff line change
@@ -20,13 +20,9 @@ on:
2020

2121
permissions:
2222
contents: write
23-
id-token: write
2423
issues: read
2524
pull-requests: read
2625

27-
env:
28-
AWS_REGION: us-west-2
29-
3026
jobs:
3127
release:
3228
runs-on: ubuntu-latest
@@ -270,13 +266,6 @@ jobs:
270266
distribution: 'corretto'
271267
cache: maven
272268

273-
- name: configure aws credentials
274-
uses: aws-actions/configure-aws-credentials@v6.2.0
275-
with:
276-
role-to-assume: "${{ secrets.ACTIONS_MVN_ROLE_NAME }}"
277-
role-session-name: mavenreleasesession
278-
aws-region: ${{ env.AWS_REGION }}
279-
280269
- name: Set release version
281270
run: mvn -q versions:set -DnewVersion=${{ github.event.inputs.release_version }} -DgenerateBackupPoms=false
282271

@@ -306,18 +295,14 @@ jobs:
306295
sdk/target/aws-durable-execution-sdk-java-${{ github.event.inputs.release_version }}.jar
307296
sdk-testing/target/aws-durable-execution-sdk-java-testing-${{ github.event.inputs.release_version }}.jar
308297
309-
- name: Get Env variables
310-
uses: aws-actions/aws-secretsmanager-get-secrets@v3
311-
with:
312-
secret-ids: |
313-
mvn_gpg_keys
314-
mvn_account_keys
315-
parse-json-secrets: true
316-
317298
- name: Sign and publish
318299
run: bash .github/scripts/maven_publish.sh
319300
env:
320301
RELEASE_VERSION: ${{ github.event.inputs.release_version }}
302+
MVN_GPG_KEYS_GPGPRIVATEKEY: ${{ secrets.MVN_GPG_KEYS_GPGPRIVATEKEY }}
303+
MVN_GPG_KEYS_GPGPASSPHRASE: ${{ secrets.MVN_GPG_KEYS_GPGPASSPHRASE }}
304+
MVN_ACCOUNT_KEYS_USERNAME: ${{ secrets.MVN_ACCOUNT_KEYS_USERNAME }}
305+
MVN_ACCOUNT_KEYS_PASSWORD: ${{ secrets.MVN_ACCOUNT_KEYS_PASSWORD }}
321306

322307
- name: Set next development version
323308
run: mvn -q versions:set -DnewVersion=${{ github.event.inputs.next_version }} -DgenerateBackupPoms=false

0 commit comments

Comments
 (0)