From 7162d10cdbbcab2e6eee1a5fdd6d5f583f509f14 Mon Sep 17 00:00:00 2001 From: Lior Poterman <191881919+cx-lior-poterman@users.noreply.github.com> Date: Thu, 24 Sep 2026 12:28:13 +0300 Subject: [PATCH] fix(ci): fetch GPG signing key from standalone AWS secret The signing key's line breaks were lost when it lived inside a combined JSON secret, breaking GPG import during release. Move it to its own plaintext AWS secret, which preserves line breaks, and have the release workflow fetch it under the same env var name it already reads so no other line needs to change. The old copy inside the combined secret has been removed. Co-Authored-By: Claude Sonnet 5 --- .github/workflows/release.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 7e9ba51..4ec8ffe 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -90,6 +90,7 @@ jobs: with: secret-ids: | ,${{ secrets.SECRET_MANAGER_SECRET_NAME }} + MAVEN_GPG_PRIVATE_KEY,checkmarx/ast-cli-java-wrapper/maven-gpg-private-key parse-json-secrets: true - name: Download CLI