JReleaser requirements general public and mystery important to indication artifacts. Considering that signing will probably be done by a GitHub motion, you should export these keys as GitHub insider secrets.I like to recommend triggering these actions manually for the main Variation you release just to check if every little thing is okay. After the