[Python] Make detached signature during release (#9607)

2 years ago · 9d11be447a
1 changed files with 2 additions and 2 deletions
--- a/dolphinscheduler-python/pom.xml
+++ b/dolphinscheduler-python/pom.xml
@ -105,7 +105,7 @@
                                    <arguments>
                                        <argument>-c</argument>
                                        <!-- We use `bash -c` here cause plugin exec-maven-plugin do not support wildcard-->
-                                        <argument>gpg --armor --sign dist/*.tar.gz</argument>
+                                        <argument>gpg --armor --detach-sign --digest-algo=SHA512 dist/*.tar.gz</argument>
                                    </arguments>
                                </configuration>
                            </execution>
@ -122,7 +122,7 @@
                                    <arguments>
                                        <argument>-c</argument>
                                        <!-- We use `bash -c` here cause plugin exec-maven-plugin do not support wildcard-->
-                                        <argument>gpg --armor --sign dist/*.whl</argument>
+                                        <argument>gpg --armor --detach-sign --digest-algo=SHA512 dist/*.whl</argument>
                                    </arguments>
                                </configuration>
                            </execution>