Secrets

SIGNING_PRIVATE_KEY

A GPG ASCII-Armored private key in the form: -----BEGIN PGP PRIVATE KEY BLOCK-----

Generation

The key needs to be sent to a keyserver for the Sonatype Signature Validation stage when closing a repository.

gpg --gen-key
*enter name & email*
*enter passphrase*
*Key is returned*: 6A4C4C7E488EE7E44CD412893919C607196D9DFB
gpg --keyserver keyserver.ubuntu.com --send-keys 6A4C4C7E488EE7E44CD412893919C607196D9DFB
gpg --export-secret-keys --armor 6A4C4C7E488EE7E44CD412893919C607196D9DFB

SIGNING_PASSWORD

The passphrase for the above key, provided in the step above

SONATYPE_NEXUS_PASSWORD

The password for the account david-allison-1 on OSS Sonatype

The username is hardcoded in the publish_*.yml files