About
When you want to sign the artifact, the POM, and all attached artifacts
Binds by default to the lifecycle phase: verify.
Articles Related
Example
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-gpg-plugin</artifactId>
<executions>
<execution>
<goals>
<goal>sign</goal>
</goals>
</execution>
</executions>
</plugin>
where;