JReleaser requires general public and solution important to signal artifacts. Considering that signing will likely be completed by a GitHub action, you might want to export these keys as GitHub tricks. "It isn't about the amount, It is really about the quality." That's what Kanna Seto mentioned within an interview https://javhd.today/releaseday/