Build Plugins

Integrate code signing into Maven and Gradle builds.

Maven Plugin

Add Plugin

<build>
  <plugins>
    <plugin>
      <groupId>com.qcecuring</groupId>
      <artifactId>code-signing-maven-plugin</artifactId>
      <version>1.0.0</version>
      <configuration>
        <platformUrl>https://signing.example.com</platformUrl>
        <apiKey>${env.SIGNING_API_KEY}</apiKey>
        <keyAlias>production-key</keyAlias>
      </configuration>
      <executions>
        <execution>
          <phase>package</phase>
          <goals>
            <goal>sign</goal>
          </goals>
        </execution>
      </executions>
    </plugin>
  </plugins>
</build>

Sign JAR

mvn clean package

Gradle Plugin

Add Plugin

plugins {
    id 'com.qcecuring.code-signing' version '1.0.0'
}

codeSigning {
    platformUrl = 'https://signing.example.com'
    apiKey = System.getenv('SIGNING_API_KEY')
    keyAlias = 'production-key'
}

Sign JAR

./gradlew build signJar

Configuration

Environment Variables

export SIGNING_API_KEY=your-api-key
export SIGNING_KEY_ALIAS=production-key

CI/CD

# GitHub Actions
- name: Build and Sign
  env:
    SIGNING_API_KEY: ${{ secrets.SIGNING_API_KEY }}
  run: mvn clean package