Publish to Maven Central

[jycr]

Add required information in pom.xml and GitHub workflow to automate publishing to Maven Central.

Changes required on GitHub account:

• Add a secret for GPG private key: MAVEN_GPG_PRIVATE_KEY
• Add a secret for GPG Key passphrase: MAVEN_GPG_PASSPHRASE
• Add secrets for Central authentication : OSSRH_USERNAME and OSSRH_TOKEN (corresponding to the account declared on https://issues.sonatype.org)

[dedece35]

Hi @jycr

please check and correct buil / test errors above, before all.

[dedece35]

Hi @jycr,

you said in description :

Changes required on GitHub account:

Add a secret for GPG private key: MAVEN_GPG_PRIVATE_KEY
Add a secret for GPG Key passphrase: MAVEN_GPG_PASSPHRASE
Add secrets for Central authentication : OSSRH_USERNAME and OSSRH_TOKEN (corresponding to the account declared on https://issues.sonatype.org/)

Ok for the creation of variables OSSRH_USERNAME and OSSRH_TOKEN. I understand we need them for contacting Sonatype.
But where do you want me to create these variables and with what values ? (in settings of ecoCode repository) ?

Secondly, I don't understand the need of GPG variables ? why are they needed ? for encryption of sent data to Sonatype ?
where do you want me to create these variables and with what values ? (in settings of ecoCode repository) ?

[jycr]

where do you want me to create these variables and with what values ? (in settings of ecoCode repository) ?

Yes, in ecoCode repository

I don't understand the need of GPG variables ? why are they needed ? for encryption of sent data to Sonatype ?

GPG variables is needed to create GPG signature of artifacts to deploy as requested in The Central Repository Documentation / Publishing my artifact / GPG Signed Components

You can see those signatures (.asc files) in the manually uploaded 0.0.1 version on Maven Central

where do you want me to create these variables and with what values ? (in settings of ecoCode repository) ?

Yes, in ecoCode repository

[sonarqubecloud]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
0.0% Duplication

The version of Java (11.0.20) you have used to run this analysis is deprecated and we will stop accepting it soon. Please update to at least Java 17.
Read more here