Maven 2.x and 3.x Site Plugin

attach-descriptor goals leaks file handlers, causing sporadic build failures when gpg tries to sign descriptor during release