Note, don't forget to sign the Maven artifacts for upload: for i in *.*; do gpg --output $i.asc --detach-sig --armor $i; done