fix: add GPG secrets to validation job for artifact signing

Author: camory

.github/workflows/release.yml

@@ -27,7 +27,8 @@ jobs:
     name: Validate ${{ matrix.module }}
     runs-on: ubuntu-latest
     needs: extract-version
-
+    env:
+      MAVEN_GPG_PASSPHRASE: ${{ secrets.GPG_SIGNING_KEY_PASSWORD }}
     strategy:
       matrix:
         module: [armonik-client, worker]
@@ -43,6 +44,8 @@ jobs:
           distribution: temurin
           java-version: '17'
           cache: maven
+          gpg-private-key: ${{ secrets.GPG_SIGNING_KEY }}
+          gpg-passphrase: MAVEN_GPG_PASSPHRASE
 
       - name: Set project version
         working-directory: ${{ matrix.module }}
@@ -71,6 +74,10 @@ jobs:
     name: Publish ${{ matrix.module }}
     runs-on: ubuntu-latest
     needs: [extract-version, validate-modules]
+    env:
+      MAVEN_GPG_PASSPHRASE: ${{ secrets.GPG_SIGNING_KEY_PASSWORD }}
+      MAVEN_USERNAME: ${{ secrets.MAVEN_USERNAME }}
+      MAVEN_PASSWORD: ${{ secrets.MAVEN_PASSWORD }}
 
     strategy:
       matrix:
@@ -102,10 +109,6 @@ jobs:
       - name: Deploy to Sonatype Central
         working-directory: ${{ matrix.module }}
         run: ./mvnw -B -ntp -Pci-release deploy -DskipTests
-        env:
-          MAVEN_USERNAME: ${{ secrets.MAVEN_USERNAME }}
-          MAVEN_PASSWORD: ${{ secrets.MAVEN_PASSWORD }}
-          MAVEN_GPG_PASSPHRASE: ${{ secrets.GPG_SIGNING_KEY_PASSWORD }}
 
   publish-docker-image:
     name: Build and publish Docker image