From ed7abff25ac6cfd584e99f44e8475ccbe2fcc39b Mon Sep 17 00:00:00 2001 From: Aetherinox Date: Tue, 10 Jun 2025 09:14:47 -0700 Subject: [PATCH] ci: add `.sig` generation to release workflow --- .github/workflows/release.yml | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index b830e800..50212094 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -429,6 +429,9 @@ jobs: sha256sum_compose="$(shasum --algorithm 256 ${filename_compose_zip} | awk '{ print $1 }')" echo "FILE_COMPOSE_ZIP=${filename_compose_zip}" >> $GITHUB_ENV + gpg --batch --yes --quiet --armor --detach-sig --sign --output sha256sum.sig sha256sum.txt.asc + gpg --batch --yes --quiet --armor --detach-sig --sign --output sha1sum.sig sha1sum.txt.asc + # # # Release › Checksum › Release Candidate # # @@ -461,6 +464,9 @@ jobs: sha256_compose="$(shasum --algorithm 256 ${filename_compose_zip} | awk '{ print $1 }')" echo "FILE_COMPOSE_ZIP=${filename_compose_zip}" >> $GITHUB_ENV + gpg --batch --yes --quiet --armor --detach-sig --sign --output sha256sum.sig sha256sum.txt.asc + gpg --batch --yes --quiet --armor --detach-sig --sign --output sha1sum.sig sha1sum.txt.asc + # # # Release › Checksum › Print # # @@ -685,6 +691,8 @@ jobs: ${{ env.PROJECT_NAME }}-${{ env.PACKAGE_VERSION }}.zip sha1sum.txt.asc sha256sum.txt.asc + sha256sum.sig + sha1sum.sig prerelease: false body: | ${{ steps.task_release_changelog_categorized.outputs.changelog }} @@ -721,6 +729,8 @@ jobs: ${{ env.PROJECT_NAME }}-${{ env.PACKAGE_VERSION }}-rc.${{ inputs.RC_VERSION }}.zip sha1sum.txt.asc sha256sum.txt.asc + sha256sum.sig + sha1sum.sig prerelease: false body: | > [!WARNING]