Hibernate/hibernate-orm
1
0
Fork 0
mirror of https://github.com/hibernate/hibernate-orm synced 2025-03-03 08:19:15 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix signing of published artifacts

Browse Source 
- for explicit signing, current form only works if the full task name/path is used from the command line, rather that Gradle's handling for tasks "short cuts".  E.g., this works :`gradlew signPublishedArtifactsPublication`; but this does not: `gradlew sign`
This commit is contained in:
Steve Ebersole 2022-05-05 11:44:34 -05:00
parent 29848043b6
commit c43fa6b4d9
1 changed files with 53 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

56
gradle/published-java-module.gradle
View File

@ -96,9 +96,11 @@ publishing {
}
}
var signingKey = resolveSigningKey()
var signingPassword = findSigningProperty( "signingPassword" )
signing {
var signingKey = resolveSigningKey()
var signingPassword = findSigningProperty( "signingPassword" )
useInMemoryPgpKeys( signingKey, signingPassword )
sign publishing.publications.publishedArtifacts
@ -119,10 +121,14 @@ String resolveSigningKey() {
}
String findSigningProperty(String propName) {
if ( System.getProperty(propName ) != null ) {
if ( System.getProperty( propName ) != null ) {
logger.lifecycle "Found `{}` as a system property", propName
return System.getProperty(propName )
}
else if ( System.getenv().get( propName ) != null ) {
logger.lifecycle "Found `{}` as an env-var property", propName
return System.getenv().get( propName );
}
else if ( project.hasProperty( propName ) ) {
logger.lifecycle "Found `{}` as a project property", propName
return project.hasProperty( propName )
@ -134,6 +140,50 @@ String findSigningProperty(String propName) {
}
final publishTaskName = "publishPublishedArtifactsPublicationToSonatypeRepository"
final signingTaskName = "signPublishedArtifactsPublication"
final signingTaskPath = project.path + ":" + signingTaskName
final signingExplicitlyRequested = gradle.startParameter.taskNames.contains( signingTaskName )
|| gradle.startParameter.taskNames.contains( signingTaskPath )
var signingTask = project.tasks.getByName( signingTaskName ) as Sign
var signingExtension = project.getExtensions().getByType(SigningExtension) as SigningExtension
signingTask.doFirst {
if ( signingKey == null || signingPassword == null ) {
throw new GradleException(
"Cannot perform signing without GPG details. Please set the `signingKey` and `signingKeyFile` properties"
)
}
}
if ( signingExplicitlyRequested ) {
// signing was explicitly requested
signingExtension.required = true
}
else {
gradle.taskGraph.whenReady { graph ->
var publishingTask = project.tasks.getByName( publishTaskName ) as PublishToMavenRepository
if ( graph.hasTask( signingTask ) ) {
// signing is scheduled to happen.
//
// we know, from above if-check, that it was not explicitly requested -
// so it is triggered via task dependency. make sure we want it to happen
if ( graph.hasTask( publishingTask ) ) {
// we are publishing to Sonatype OSSRH - we need the signing to happen
signingExtension.required = true
}
else {
// signing was not explicitly requested and we are not publishign to OSSRH
// so do not sign
signingTask.enabled = false
}
}
}
}
// ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
// Release / publishing tasks