Resolve "Add JAR signing to build"

Jenkinsfile

@@ -67,6 +67,13 @@ pipeline {
                         # Configure 'jenkins' profile for build.
                         BUILD_ARGS="-Pjenkins"
 
+                        # Configure 'sign' profile for build.
+                        # Sign 'master' branch, to allow checking release signing before deployment.
+                        # Sign releases. Determined based on release version tag name.
+                        if [[ "$GIT_BRANCH" == "master" || "$TAG_NAME" =~ ^v[0-9]+\\.[0-9]+.*$ ]]; then
+                            BUILD_ARGS="$BUILD_ARGS -Psign"
+                        fi
+
                         # Override the 'trace4cps.version.enduser' property for releases. Remains 'dev' otherwise.
                         if [[ "$TAG_NAME" =~ ^v[0-9]+\\.[0-9]+.*$ ]]; then
                             BUILD_ARGS="$BUILD_ARGS -Dtrace4cps.version.enduser=$TAG_NAME"

releng/org.eclipse.trace4cps.configuration/pom.xml

@@ -54,15 +54,15 @@
         <!-- Checkstyle version. Should match version used by Eclipse Checkstyle Plugin. -->
         <maven.checkstyle.version>3.1.2</maven.checkstyle.version>
         <checkstyle.version>8.41</checkstyle.version>
+
+        <!-- Eclipse Common Build Infrastructure version. -->
+        <eclipse.cbi.version>1.3.1</eclipse.cbi.version>
     </properties>
 
     <pluginRepositories>
-        <!--
-            Dash license plugin.
-            Given that this contains snapshots, this must be first.
-            Looking for snapshots on release repos will give an error,
-            regardless of whether the plugin is present there or not.
-        -->
+        <!-- Dash license plugin. -->
+        <!-- Given that this contains snapshots, this must be first. Looking for snapshots on release repos will give an 
+            error, regardless of whether the plugin is present there or not. -->
         <pluginRepository>
             <id>dash-licenses-snapshots</id>
             <url>https://repo.eclipse.org/content/repositories/dash-licenses-snapshots/</url>
@@ -70,8 +70,15 @@
                 <enabled>true</enabled>
             </snapshots>
         </pluginRepository>
+
+        <!-- Eclipse CBI releases. For CBI signing plugins. -->
+        <pluginRepository>
+            <id>eclipse.cbi</id>
+            <url>https://repo.eclipse.org/content/repositories/cbi-releases/</url>
+        </pluginRepository>
     </pluginRepositories>
 
+
     <build>
         <plugins>
             <!-- Enable Tycho. -->
@@ -494,5 +501,29 @@
                 </plugins>
             </build>
         </profile>
+
+        <!-- Signing. -->
+        <profile>
+            <id>sign</id>
+            <build>
+                <plugins>
+                    <!-- Sign JARs. -->
+                    <plugin>
+                        <groupId>org.eclipse.cbi.maven.plugins</groupId>
+                        <artifactId>eclipse-jarsigner-plugin</artifactId>
+                        <version>${eclipse.cbi.version}</version>
+                        <executions>
+                            <execution>
+                                <id>sign</id>
+                                <phase>verify</phase>
+                                <goals>
+                                    <goal>sign</goal>
+                                </goals>
+                            </execution>
+                        </executions>
+                    </plugin>
+                </plugins>
+            </build>
+        </profile>
     </profiles>
 </project>