Review comments

build.gradle

@@ -6,6 +6,7 @@ plugins {
     id 'project-report'
     id 'idea'
     id 'java-gradle-plugin'
+    id 'signing'
     id 'com.gradle.plugin-publish' version '1.1.0'
     id 'org.ajoberstar.git-publish' version '4.1.1'
     id 'com.github.node-gradle.node' version '3.5.1'

gradle/docs.gradle

@@ -9,15 +9,9 @@ tasks.withType(Javadoc).configureEach {
     }
 }
 
-def javadocJar = tasks.register('javadocJar', Jar) {
-    dependsOn tasks.withType(Javadoc)
-    archiveClassifier.set('javadoc')
-    from 'build/docs/javadoc'
-}
-
-def sourcesJar = tasks.register('sourcesJar', Jar) {
-    archiveClassifier.set('sources')
-    from sourceSets.main.allSource
+java {
+    withJavadocJar()
+    withSourcesJar()
 }
 
 tasks.named('groovydoc') {

gradle/publish.gradle

@@ -35,6 +35,22 @@ tasks.named('publishPlugins') {
     notCompatibleWithConfigurationCache("https://github.com/gradle/gradle/issues/21283")
 }
 
+signing {
+    if (System.env.CI == 'true') {
+        def encodedSigningKey = findProperty("signingKey")
+        def signingKey = encodedSigningKey ? new String(encodedSigningKey.decodeBase64()) : null
+        def signingPassword = findProperty("signingPassword") as String
+        useInMemoryPgpKeys(signingKey, signingPassword)
+    }
+    // See https://github.com/johnrengelman/shadow/pull/831#discussion_r1119012328
+    required = false && gradle.taskGraph.hasTask("artifactoryPublish")
+    sign(publishing.publications)
+}
+
+tasks.withType(Sign).configureEach {
+    notCompatibleWithConfigurationCache("https://github.com/gradle/gradle/issues/13470")
+}
+
 tasks.register('release') {
     dependsOn tasks.named('assemble'), tasks.named('publishPlugins'), tasks.named('gitPublishPush')
 }