Where communities thrive


  • Join over 1.5M+ people
  • Join over 100K+ communities
  • Free without limits
  • Create your own community
People
Repo info
Activity
    Yang, Bo
    @Atry
    Works fine for me, Thank you! @jsuereth
    Jeroen Rosenberg
    @jeroenr
    Hi guys
    Got a small issue
    sbt-gpg is selecting the wrong key
    how can I tell it to use a specific GPG key from my keyring?
    I tried: usePgpKeyHex("MY_HEX")
    but it doesn't seem to have any effect
    any pointers?
    Felix Mulder
    @felixmulder

    I'm having issues with the sbt-pgp v1.0.1 and supplying the password from outside of SBT.

    I've got a pgp.credentials file in ~/.sbtthat looks like this:

    realm=PGP Secret Key
    host=pgp
    user=sbt
    password=Yeahalrightmate

    But when running $ sbt publishSigned it still asks for my pass :/

    I also have credentials += Credentials(Path.userHome / ".sbt" / "pgp.credentials") in ~/.sbt/0.13/global.sbt
    Felix Mulder
    @felixmulder

    Solved by putting:

    com.typesafe.sbt.pgp.PgpSettings.pgpPassphrase := Some("pass".toCharArray)

    in ~/.sbt/0.13/global.sbt, didn't work without the prefixes

    Dave Kichler
    @dkichler
    I'm having the same issue with the pgpPassphrase, but get this error when attempting to build: .sbt/0.13/global.sbt:2: error: object typesafe is not a member of package com when defining ~/.sbt/0.13/global.sbt as above
    Faiaz Sanaulla
    @fsanaulla
    Hi guys
    can you hep me. I'm trying to make publishSigned, but some ex is occur.[error] gpg: [don't know]: invalid packet (ctb=2d) [error] gpg: keydb_search failed: invalid packet [error] gpg: no default secret key: invalid packet [error] gpg: signing failed: invalid packet
    [error] gpg: [don't know]: invalid packet (ctb=2d)
    [error] gpg: keydb_search failed: invalid packet
    [error] gpg: no default secret key: invalid packet
    [error] gpg: signing failed: invalid packet
    looks better
    Faiaz Sanaulla
    @fsanaulla
    [error] (*:signedArtifacts) Failure running gpg --detach-sign.  Exit code: 2
    Michiel Mulders
    @michielmulders
    Sorry for asking a not so relevant question here, cannot find a pgp specific group on gitter and I'm not getting answers on BitcoinTalk.
    With pgp, the problem seems to be that you can verify a message, but still you don't know if the person behind the public key is the person he pretends to be.
    My question: why is there no tool to attach KYC (Know your customer: passport, drivers license, picture of you holding pub key and date on paper, ...) to your PGP Pub Key like the MIT PGP key server?
    Thomas Grainger
    @graingert
    @michielmulders ask in IRC. Also because a picture like that is not secure
    Loránd Szakács
    @lorandszakacs

    folks, I have a problem setting the PGP passphrase via PGP_PASSPHRASE environment variable in sbt-pgp 2.0.0. I definitely have it set because I can echo it, but in sbt:

    sbt:pureharm> show pgpPassphrase
    [info] module1 / pgpPassphrase
    [info]  None
    ...

    I double checked the name of the environment variable in the PR that should read it from there.
    sbt/sbt-pgp#165

    Anyone know any gotchas that might cause this? :/

    a, lol, because the key that stores it is pgpSelectPassphrase not pgpPassphrase :joy:
    But still, when I do publishSignedLocal I still get prompted for the passphrase :cry:
    Thijs Broersen
    @ThijsBroersen
    @lorandszakacs having also issues after upgrading to 2.x. On travis it fails with on command gpg --detach-sign --armor --use-agent --default-key ... (missing --batch and password somehow), locally it fails on gpg --batch --passphrase xxx --detach-sign --armor --use-agent --default-key ...(it prompts for a password).
    Kai Matsuda
    @vangogh500
    Hi! I'm trying to use publishSigned in CICD. I have an environment variable called PGP_PASSPHRASE as stated in the docs with my passphrase. However it's still prompting me for a passphrase in my CI pipeline. Is there something I am missing? Thanks!
    Salar Rahmanian
    @softinio
    hi all using this package in our ci pipeline and want to use Global / gpgCommand := to specify a different gpg version to call than the OS default ... following the README i added it to ~/.sbt/gpg.sbt when I do nothing happens and the original gpg command is still called ..... then I tried moving this build.sbt and I get this error build.sbt:25: error: not found: value gpgCommand any thoughts on what I am doing wrong? Thanks for all help all.
    Salar Rahmanian
    @softinio
    how does sbt-pgp choose which keyserver to use ?
    Michael Pigott
    @mikepigott

    Hello, I’m sorry for the n00b question, but I’m trying to publish artifacts compiled under Scala 2.13. Unfortunately I keep getting this error:

    [warn] ::::::::::::::::::::::::::::::::::::::::::::::
    [warn] :: UNRESOLVED DEPENDENCIES ::
    [warn] ::::::::::::::::::::::::::::::::::::::::::::::
    [warn] :: com.jsuereth#sbt-pgp;2.0.0: not found
    [warn] ::::::::::::::::::::::::::::::::::::::::::::::
    [warn]
    [warn] Note: Some unresolved dependencies have extra attributes. Check that these dependencies exist with the requested attributes.
    [warn] com.jsuereth:sbt-pgp:2.0.0 (scalaVersion=2.13, sbtVersion=1.0)

    I don’t see anything in the project Issues … how would I cross-compile 2.13?
    sken
    @sken77
    im trying to sign with publisSigned
    but it is asking me for the gpg-agent
    i already hav gpg-agent installed and running
    is there something else i need to do?
    this gitter doesnt even look active
    Carlos Verdes
    @carlos-verdes

    Hello, I’m sorry for the n00b question, but I’m trying to publish artifacts compiled under Scala 2.13. Unfortunately I keep getting this error:

    [warn] ::::::::::::::::::::::::::::::::::::::::::::::
    [warn] :: UNRESOLVED DEPENDENCIES ::
    [warn] ::::::::::::::::::::::::::::::::::::::::::::::
    [warn] :: com.jsuereth#sbt-pgp;2.0.0: not found
    [warn] ::::::::::::::::::::::::::::::::::::::::::::::
    [warn]
    [warn] Note: Some unresolved dependencies have extra attributes. Check that these dependencies exist with the requested attributes.
    [warn] com.jsuereth:sbt-pgp:2.0.0 (scalaVersion=2.13, sbtVersion=1.0)

    they changed the group id, it's not com.jsuereth anymore, read again their github they mention :)

    I have same issue as others trying to pass the passphrase on publishSigned step
    I'm using this version of the plugin:
    addSbtPlugin("com.github.sbt" % "sbt-pgp" % "2.1.2")
    Carlos Verdes
    @carlos-verdes
    I got a workaround to pass the passphrase from env variables just in case someone has same issue
    you can use next plugin addSbtPlugin("au.com.onegeek" %% "sbt-dotenv" % "2.1.146")
    then create a .env file in your repo (and add to .gitignore)
    the plugin will read the file and load the variables when sbt starts
    with this I solved the issue of the passphrase
    Min Joo Kang
    @mandoolala
    how do I use sbt-pgp in run time?
    how can I add the plugin as a library dependency and import it as function, and use function like encrypt and decrypt?
    Georgi Krastev
    @joroKr21
    Hi! How do I change the keyserver sbt-pgp is using? I have configured keyserver hkp://keyserver.ubuntu.com/ in gpg.conf but I get an error when trying to publish - No public key: Key with id: (cbe0c84492789a1c) was not able to be located on <a href="http://pgp.mit.edu:11371/">
    Why is it even trying to use MIT?
    I have apple M1 - could it be related? Like running different arch?
    Dammit - it worked with non-native Java :angry: