diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index c15c034c..5bb93e9c 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -284,15 +284,6 @@ jobs:
     needs: [build-java, build-jpackage, build-native]
     runs-on: ubuntu-latest
     steps:
-    - name: Install gpg secret key
-      run: |
-        cat <(echo -e "${{ secrets.OSSRH_GPG_SECRET_KEY }}") | gpg --batch --import
-    - name: Setup .netrc file
-      uses: extractions/netrc@v3
-      with:
-        machine: ossrh-staging-api.central.sonatype.com
-        username: ${{ secrets.OSSRH_USERNAME }}
-        password: ${{ secrets.OSSRH_TOKEN }}
     - name: Checkout code
       uses: actions/checkout@v7
     - name: Set up JDK 25
@@ -303,13 +294,20 @@ jobs:
     - name: Setup Gradle
       uses: gradle/actions/setup-gradle@v6
     - name: Publish with Gradle
-      run: >
-        ./gradlew 
-        -PossrhUsername="${{ secrets.OSSRH_USERNAME }}"
-        -PossrhPassword="${{ secrets.OSSRH_TOKEN }}"
-        -Psigning.keyId="${{ secrets.GPG_SIGNING_KEY }}"
-        -Psigning.password="${{ secrets.GPG_SIGNING_PASSPHRASE }}"
-        -Psigning.secretKeyRingFile=/home/runner/.gnupg/trustdb.gpg
-        build publish -x test
+      run: |
+        export ORG_GRADLE_PROJECT_signingKey=$(echo "$GPG_SIGNING_KEY_BASE64" | base64 -d)
+        ./gradlew build publish -x test
+      env:
+        ORG_GRADLE_PROJECT_ossrhUsername: ${{ secrets.OSSRH_USERNAME }}
+        ORG_GRADLE_PROJECT_ossrhPassword: ${{ secrets.OSSRH_TOKEN }}
+        ORG_GRADLE_PROJECT_signingPassword: ${{ secrets.GPG_SIGNING_PASSPHRASE }}
+        GPG_SIGNING_KEY_BASE64: ${{ secrets.GPG_SIGNING_KEY_BASE64 }}
+        ORG_GRADLE_PROJECT_signingKeyId: ${{ secrets.GPG_SIGNING_KEY_ID }}
+    - name: Setup .netrc file
+      uses: extractions/netrc@v3
+      with:
+        machine: ossrh-staging-api.central.sonatype.com
+        username: ${{ secrets.OSSRH_USERNAME }}
+        password: ${{ secrets.OSSRH_TOKEN }}
     - name: Finish publishing
       run: ./scripts/finish-publishing.sh