From cd65d5a9b0f4e984304459bfc30c3c7f0a2d9532 Mon Sep 17 00:00:00 2001
From: kirich1409 <kirill@androidbroadcast.dev>
Date: Sun, 17 May 2026 19:12:18 +0300
Subject: [PATCH] Bind publish job to Main environment

Secrets are declared at the environment level (Main), not at the
repo level. Without binding the publish job to that environment,
GitHub Actions injects empty values for MAVEN_CENTRAL_* and GPG_*,
causing signing to fail with "Could not read PGP secret key".
---
 .github/workflows/publish.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index a5714cc..f95a3bc 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -19,6 +19,7 @@ jobs:
   publish:
     name: Publish to Maven Central
     runs-on: ubuntu-latest
+    environment: Main
 
     steps:
       - uses: actions/checkout@v6