update workflow actions for gpg signing #17

	# This workflow will build a Java project with Maven, and cache/restore any dependencies to improve the workflow execution time
	# For more information see: https://docs.github.com/en/actions/automating-builds-and-tests/building-and-testing-java-with-maven

	# This workflow uses actions that are not certified by GitHub. They are provided by a third-party and are governed by
	# separate terms of service, privacy policy, and support documentation.

	name: CI/CD Pipeline - Publish

	on:
	release:
	types: [created]
	push:
	branches: [ "main" ]
	pull_request:
	branches: [ "main" ]

	jobs:
	publish:
	name: Build, Test, Package and Deploy
	# Using GitHub hosted Linux runner w/ 2CPUs, 7GB RAM, 14GB SSD
	runs-on: ubuntu-latest

	permissions:
	contents: read
	packages: write

	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Set up JDK 17
	uses: actions/setup-java@v4
	with:
	java-version: '17'
	distribution: 'zulu'
	cache: maven
	settings-path: ${{ github.workspace }}/.github
	gpg-private-key: ${{ secrets.GPG_PRIVATE_KEY }}

	- name: Deploy to GitHub Packages
	run: mvn -B deploy -P FullBuild
	env:
	USER_NAME: ${{ secrets.USER_NAME }}
	PAT_TOKEN: ${{ secrets.PAT_TOKEN }}
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

Provide feedback