From 97254991691fd11f871c353630163baf81bdcb8e Mon Sep 17 00:00:00 2001 From: Haotian Zhang <928016560@qq.com> Date: Tue, 1 Sep 2026 17:21:02 +0800 Subject: [PATCH] chore: import GPG key from env without echo -e. Pass the armored key as an environment variable and pipe it to gpg so the GitHub secret can keep real newlines. Signed-off-by: Haotian Zhang <928016560@qq.com> Co-authored-by: Cursor --- .github/workflows/release.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index aed02c33a..7fe2a4a3f 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -23,6 +23,7 @@ jobs: MAVEN_USERNAME: ${{ secrets.CENTRAL_PORTAL_USERNAME }} MAVEN_PASSWORD: ${{ secrets.CENTRAL_PORTAL_TOKEN }} MAVEN_GPG_PASSPHRASE: ${{ secrets.OSSRH_GPG_SECRET_KEY_PASSWORD }} + OSSRH_GPG_SECRET_KEY: ${{ secrets.OSSRH_GPG_SECRET_KEY }} run: | - cat <(echo -e "${{ secrets.OSSRH_GPG_SECRET_KEY }}") | gpg --batch --import; + printf '%s\n' "$OSSRH_GPG_SECRET_KEY" | gpg --batch --import mvn clean deploy -B -U -P release -Dmaven.test.skip=true \ No newline at end of file