From 056b6a270e97b48541caced7302a9aef057aed54 Mon Sep 17 00:00:00 2001
From: Haroon Khel <hkhel@redhat.com>
Date: Mon, 6 Jan 2025 14:23:07 +0000
Subject: [PATCH] Run the GPG sign job after the SBOM sign

---
 pipelines/build/common/openjdk_build_pipeline.groovy | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/pipelines/build/common/openjdk_build_pipeline.groovy b/pipelines/build/common/openjdk_build_pipeline.groovy
index 76caede27..af31fcc6e 100644
--- a/pipelines/build/common/openjdk_build_pipeline.groovy
+++ b/pipelines/build/common/openjdk_build_pipeline.groovy
@@ -2484,8 +2484,9 @@ def buildScriptsAssemble(
                 if (!env.JOB_NAME.contains('pr-tester') && context.JENKINS_URL.contains('adopt')) {
                     try {
                         context.println "openjdk_build_pipeline: Running GPG signing process"
-                        gpgSign()
                         jsfSignSBOM()
+                        gpgSign()
+                        
                     } catch (Exception e) {
                         context.println(e.message)
                         currentBuild.result = 'FAILURE'