slawekjaranowski opened a new pull request, #366:
URL: https://github.com/apache/maven-gh-actions-shared/pull/366

   Since 839c4656 the `Build with Maven` step runs in Git Bash, which puts its 
own `/usr/bin` first in `PATH`. On Windows Maven therefore runs the MSYS gpg 
2.4.9 of Git for Windows instead of Gpg4win. That gpg does not understand 
Windows paths: it reads `--homedir D:\a\...` as a relative path, so signing 
fails with `No secret key`. See the maven-gpg-plugin run 
https://github.com/apache/maven-gpg-plugin/actions/runs/39131128231.
   
   With this change, `Install GnuPG` exposes the Gpg4win `bin` directory as a 
step output. `Build with Maven` puts that directory first in `PATH`. `Check 
GnuPG` now runs in bash with the same `PATH`, so it checks the gpg the build 
will actually use.
   
   🤖 Generated with [Claude Code](https://claude.com/claude-code)
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to