From 01fcd424316b55fd0f54c0608038e51874e28328 Mon Sep 17 00:00:00 2001
From: Nicholas Albion <nalbion@yahoo.com>
Date: Thu, 7 Sep 2023 11:45:01 +1000
Subject: [PATCH] sign jar for Maven Central repo

---
 .github/workflows/build.yml |  2 ++
 bindings/java/build.gradle  | 12 +++++++++++-
 2 files changed, 13 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 08eda87..a12f3f5 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -437,6 +437,8 @@ jobs:
           MAVEN_PASSWORD: ${{ secrets.JIRA_PASS }}
           # MAVEN_USERNAME: ${{ secrets.OSSRH_USERNAME }}
           # MAVEN_PASSWORD: ${{ secrets.OSSRH_TOKEN }}
+          PGP_SECRET: ${{ secrets.PGP_SECRET }}
+          PGP_PASSPHRASE: ${{ secrets.PGP_PASSPHRASE }}
 
   quantize:
     runs-on: ubuntu-latest
diff --git a/bindings/java/build.gradle b/bindings/java/build.gradle
index 8e2bc2c..8f7a5fd 100644
--- a/bindings/java/build.gradle
+++ b/bindings/java/build.gradle
@@ -2,6 +2,7 @@ plugins {
     id 'java'
     id 'java-library'
     id 'maven-publish'
+    id 'signing'
 }
 
 archivesBaseName = 'whispercpp'
@@ -112,7 +113,9 @@ publishing {
 
     repositories {
         maven {
-            url = 'https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/'
+            def releasesRepoUrl = 'https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/'
+            def snapshotsRepoUrl = 'https://s01.oss.sonatype.org/content/repositories/snapshots/'
+            url = version.endsWith('-SNAPSHOT') ? snapshotsRepoUrl : releasesRepoUrl
             credentials {
                 username = System.getenv("MAVEN_USERNAME")
                 password = System.getenv("MAVEN_PASSWORD")
@@ -120,3 +123,10 @@ publishing {
         }
     }
 }
+
+signing {
+    def signingKey = System.getenv("PGP_SECRET")
+    def signingPassword = System.getenv("PGP_PASSPHRASE")
+    useInMemoryPgpKeys(signingKey, signingPassword)
+    sign publishing.publications.mavenJava
+}