From 8cd2f746de7b3f561d2b2f0877647a2486872ff5 Mon Sep 17 00:00:00 2001
From: Rocky Breslow <rbreslow@azavea.com>
Date: Wed, 10 Jun 2020 11:30:03 -0400
Subject: [PATCH] Receive GPG key while publishing artifacts (#243)

* Receive GPG key while publishing artifacts

* Build on CircleCI

* Changelog
---
 .circleci/config.yml | 7 ++++---
 CHANGELOG.md         | 4 ++++
 2 files changed, 8 insertions(+), 3 deletions(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 56ac7da8..87862b1c 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -25,10 +25,10 @@ aliases:
     - run:
         name: "Import signing key"
         command: |
+          gpg --keyserver keyserver.ubuntu.com \
+            --recv-keys 0x13E9AA1D8153E95E && \
           echo "${GPG_KEY}" | base64 -d > signing_key.asc && \
-          gpg --batch \
-            --passphrase "${GPG_PASSPHRASE}" \
-            --import signing_key.asc
+          gpg --import signing_key.asc
     - run:
         name: Executing cipublish
         command: ./scripts/cipublish
@@ -96,6 +96,7 @@ workflows:
                 - develop
                 - /release\/.*/
                 - /hotfix\/.*/
+                - feature/jrb/receive-gpg-key
 
 jobs:
   # Execute cibuild in machine executor so we can use our existing
diff --git a/CHANGELOG.md b/CHANGELOG.md
index c85d9a17..95fc36cc 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Added
+
+- Receive GPG key while publishing artifacts [#243](https://github.com/geotrellis/geotrellis-contrib/pull/243)
+
 ### Changed
 
 - Artifacts are published to https://oss.sonatype.org automatically via CircleCI