loot/libloot
0
0
Fork 0
mirror of https://github.com/loot/libloot.git synced 2026-07-27 14:16:01 -07:00
Code Issues Packages Projects Releases Wiki Activity

Sign snapshot build artifacts using GPG

Browse Source 
In preparation for not having an "official" hosting location for the
artifacts once my JFrog account is closed, so that the authenticity of
files hosted elsewhere can be verified.

The public key is hosted on the loot.github.io website.
This commit is contained in:
Oliver Hamlet
2023-06-05 17:59:58 +01:00
parent 74805a3bc6
commit d3572b5127
1 changed files with 18 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/ci.yml
+18 -2
View File
@@ -140,11 +140,19 @@ jobs:
VERSION="${{ steps.get-libloot-version.outputs.version }}"
echo "filename=libloot-${VERSION}-Linux.tar.xz" >> $GITHUB_OUTPUT
- name: Import GPG key
run: echo -n "${{ secrets.GPG_SIGNING_KEY }}" | gpg --import
- name: Sign archive
run: gpg --output "build/package/${{ steps.build-archive.outputs.filename }}.sig" --detach-sig "build/package/${{ steps.build-archive.outputs.filename }}"
- name: Upload archive
uses: actions/upload-artifact@v3
with:
name: ${{ steps.build-archive.outputs.filename }}
path: build/package/${{ steps.build-archive.outputs.filename }}
path: |
build/package/${{ steps.build-archive.outputs.filename }}
build/package/${{ steps.build-archive.outputs.filename }}.sig
if: github.event_name == 'push'
windows:
@@ -227,9 +235,17 @@ jobs:
echo "filename=libloot-${VERSION}-${PLATFORM}.7z" >> $GITHUB_OUTPUT
- name: Import GPG key
run: echo -n "${{ secrets.GPG_SIGNING_KEY }}" | gpg --import
- name: Sign archive
run: gpg --output "build/package/${{ steps.build-archive.outputs.filename }}.sig" --detach-sig "build/package/${{ steps.build-archive.outputs.filename }}"
- name: Upload archive
uses: actions/upload-artifact@v3
with:
name: ${{ steps.build-archive.outputs.filename }}
path: build/package/${{ steps.build-archive.outputs.filename }}
path: |
build/package/${{ steps.build-archive.outputs.filename }}
build/package/${{ steps.build-archive.outputs.filename }}.sig
if: github.event_name == 'push'