diff --git a/maven/maven_deploy_library.sh b/maven/maven_deploy_library.sh
index a72f905..44ce74b 100755
--- a/maven/maven_deploy_library.sh
+++ b/maven/maven_deploy_library.sh
@@ -110,8 +110,9 @@ parse_args() {
       if [[ -z "${GIT_URL}" ]]; then
         usage
       fi
+      # TODO(b/329143784): Move to 3.2.0 when possible.
       MAVEN_ARGS+=(
-        "gpg:sign-and-deploy-file"
+        "org.apache.maven.plugins:maven-gpg-plugin:3.1.0:sign-and-deploy-file"
         "-DrepositoryId=ossrh"
         "-Durl=https://oss.sonatype.org/service/local/staging/deploy/maven2/"
         "-Dgpg.keyname=tink-dev@google.com"
diff --git a/maven/maven_deploy_library_test.sh b/maven/maven_deploy_library_test.sh
index cb2dc58..3632d9f 100755
--- a/maven/maven_deploy_library_test.sh
+++ b/maven/maven_deploy_library_test.sh
@@ -156,7 +156,8 @@ test_MavenDeployLibraryTest_ReleaseSucceeds() {
 
   cat << EOF > expected_commands.txt
 bazel build tink.jar tink-src.jar tink-javadoc.jar
-mvn gpg:sign-and-deploy-file -DrepositoryId=ossrh \
+mvn org.apache.maven.plugins:maven-gpg-plugin:3.1.0:sign-and-deploy-file \
+-DrepositoryId=ossrh \
 -Durl=https://oss.sonatype.org/service/local/staging/deploy/maven2/ \
 -Dgpg.keyname=tink-dev@google.com \
 --settings=${TEST_CASE_TMPDIR}/${RELATIVE_MVN_DIR_PATH}/settings.xml \