Use Sonatype token authentication

See guardian/gha-scala-library-release-workflow#23
rtyley · Jan 16, 2024 · ddf4ce5 · ddf4ce5
1 parent aeed857
commit ddf4ce5
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -5,12 +5,12 @@ on:
 
 jobs:
   release:
-    uses: guardian/gha-scala-library-release-workflow/.github/workflows/reusable-release.yml@give-earlier-warning-when-pgp-key-misconfigured
+    uses: guardian/gha-scala-library-release-workflow/.github/workflows/reusable-release.yml@use-sonatype-token-rather-than-username-password-auth
     permissions: { contents: write, pull-requests: write }
     with:
       SONATYPE_PROFILE_NAME: 'com.madgag'
       SONATYPE_CREDENTIAL_HOST: 's01.oss.sonatype.org'
-      SONATYPE_USERNAME: 'roberto'
     secrets:
-      SONATYPE_PASSWORD: ${{ secrets.AUTOMATED_MAVEN_RELEASE_SONATYPE_PASSWORD }}
+      SONATYPE_TOKEN_USERNAME: ${{ secrets.AUTOMATED_MAVEN_RELEASE_SONATYPE_TOKEN_USERNAME }}
+      SONATYPE_TOKEN_PASSWORD: ${{ secrets.AUTOMATED_MAVEN_RELEASE_SONATYPE_TOKEN_PASSWORD }}
       PGP_PRIVATE_KEY: ${{ secrets.AUTOMATED_MAVEN_RELEASE_PGP_SECRET }}