ci: securely pass GPG passphrase via loopback and env var

Author: bramp

.github/workflows/publish.yml

@@ -46,7 +46,7 @@ jobs:
           mvn clean deploy \
             -DskipTests=${{ github.event.inputs.skipTests || 'true' }} \
             --no-transfer-progress \
-            -P Java11+
+            -P java11plus
         env:
           CENTRAL_USERNAME: ${{ secrets.CENTRAL_USERNAME }}
           CENTRAL_PASSWORD: ${{ secrets.CENTRAL_PASSWORD }}

pom.xml

@@ -426,6 +426,12 @@
                         <goals>
                             <goal>sign</goal>
                         </goals>
+                        <configuration>
+                            <gpgArguments>
+                                <arg>--pinentry-mode</arg>
+                                <arg>loopback</arg>
+                            </gpgArguments>
+                        </configuration>
                     </execution>
                 </executions>
             </plugin>
@@ -728,7 +734,7 @@
         </profile>
 
         <profile>
-            <id>Java 11+</id>
+            <id>java11plus</id>
             <activation>
                 <jdk>[11,)</jdk>
             </activation>