The Maven team is pleased to announce the release of the Maven GPG Plugin, version 1.2
Signs the project artifacts with GnuPG. http://maven.apache.org/plugins/maven-gpg-plugin You should specify the version in your project's plugin configuration: <plugin> <groupId>org.apache.maven.plugins</groupId> <artifactId>maven-gpg-plugin</artifactId> <version>1.2</version> </plugin> Release Notes - Maven GPG Plugin - Version 1.2 Bug * [MGPG-26] sign-and-deploy-file does not work with javadoc and sources artifcats New Feature * [MGPG-30] Support alternative location of secret keyring Enjoy, -The Maven team