JReleaser wants community and secret key to signal artifacts. Since signing will likely be accomplished by a GitHub action, you need to export these keys as GitHub secrets and techniques. I like to recommend triggering these steps manually for the first Edition you release simply to see if almost everything https://manueluvsph.thelateblog.com/36754100/the-ultimate-guide-to-jav-today