use in-memory key variant

.buildkite/hooks/prepare-release.sh

@@ -32,6 +32,12 @@ export KEY_ID_SECRET
 # Import the key into the keyring
 echo "$KEYPASS_SECRET" | gpg --batch --import "$KEY_FILE"
 
+# Export the key in ascii armored format
+gpg --enarmor ${KEY_FILE}
+SECRING_ASC="$(cat "$KEY_FILE.asc")"
+export SECRING_ASC
+
+
 echo "--- Configure git context :git:"
 # Configure the committer since the maven release requires to push changes to GitHub
 # This will help with the SLSA requirements.

.ci/snapshot.sh

@@ -41,6 +41,5 @@ chmod 600 ${folder}/gpg/gpg.conf
 ./gradlew \
     --debug \
     --console=plain \
-    -Psigning.gnupg.optionsFile=${folder}/gpg/gpg.conf \
     clean ${publishArg} \
     | tee snapshot.txt

agent/build.gradle

@@ -154,7 +154,7 @@ publishing {
 }
 
 signing {
-  // use gpg agent
-  useGpgCmd()
+  // use in-memory ascii-armored key in enviroment variables
+  useInMemoryPgpKeys(System.getenv("KEY_ID_SECRET"), System.getenv("SECRING_ASC"), System.getenv("KEYPASS_SECRET"))
   sign publishing.publications.agentJar
 }