diff --git a/.github/workflows/sonarcloud.yml b/.github/workflows/sonarcloud.yml
index b726230..8fb9269 100644
--- a/.github/workflows/sonarcloud.yml
+++ b/.github/workflows/sonarcloud.yml
@@ -18,11 +18,11 @@ jobs:
         with:
           java-version: 17
           distribution: 'zulu' # Alternative distribution options are available.
-      - id: install-secret-key
-        name: Install gpg secret key
-        run: |
-           cat <(echo -e "${{ secrets.OSSRH_GPG_SECRET_KEY }}") | gpg --batch --import
-           gpg --list-secret-keys --keyid-format LONG
+      - name: Import GPG Key
+        uses: crazy-max/ghaction-import-gpg@v5.0.0
+        with:
+          gpg_private_key: ${{ secrets.OSSRH_GPG_SECRET_KEY }}
+          passphrase: ${{ secrets.OSSRH_GPG_SECRET_KEY_PASSWORD }}
       - name: Cache SonarCloud packages
         uses: actions/cache@v3
         with: