Adding build profile to sign using gpg key.

pom.xml

@@ -116,6 +116,7 @@
         <snakeyaml.version>2.3</snakeyaml.version>
         <spring.boot.version>2.1.8.RELEASE</spring.boot.version>
     </properties>
+
     <build>
         <pluginManagement>
             <plugins>
@@ -266,6 +267,31 @@
                 </plugins>
             </build>
         </profile>
+        <profile>
+            <id>sign</id>
+            <activation>
+                <property>
+                    <name>sign</name>
+                </property>
+            </activation>
+            <build>
+                <plugins>
+                    <plugin>
+                        <groupId>org.apache.maven.plugins</groupId>
+                        <artifactId>maven-gpg-plugin</artifactId>
+                        <executions>
+                            <execution>
+                                <id>sign-artifacts</id>
+                                <phase>verify</phase>
+                                <goals>
+                                    <goal>sign</goal>
+                                </goals>
+                            </execution>
+                        </executions>
+                    </plugin>
+                </plugins>
+            </build>
+        </profile>
         <profile>
             <id>owasp</id>
             <activation>