From fbd2a82dac28a4bed5fd63e92a4862c1442c84b9 Mon Sep 17 00:00:00 2001
From: Didier Garcia <digarcia@twilio.com>
Date: Mon, 27 Jul 2026 16:29:53 -0400
Subject: [PATCH] fix: use in-memory PGP signing instead of writing key to tmp
 file

---
 gradle/promote.gradle | 10 +---------
 1 file changed, 1 insertion(+), 9 deletions(-)

diff --git a/gradle/promote.gradle b/gradle/promote.gradle
index 864e3af0..997d5cbb 100644
--- a/gradle/promote.gradle
+++ b/gradle/promote.gradle
@@ -9,15 +9,7 @@ if (!hasProperty("signing.keyId")) {
 
     def pgpKeyContent = System.getenv('SIGNING_PRIVATE_KEY_BASE64')
     if (pgpKeyContent != null) {
-        def tmpDir = new File("$rootProject.rootDir/tmp")
-        mkdir tmpDir
-        def keyFile = new File("$tmpDir/key.pgp")
-        keyFile.createNewFile()
-        def os = keyFile.newDataOutputStream()
-        os.write(pgpKeyContent.decodeBase64())
-        os.close()
-
-        ext['signing.secretKeyRingFile'] = keyFile.absolutePath
+        ext['signing.key'] = new String(pgpKeyContent.decodeBase64())
     }
 }