From 18cc46d7b7fec5688ebcfc77efdb41f5c920a3e1 Mon Sep 17 00:00:00 2001 From: Alex Moinet Date: Wed, 13 Nov 2024 10:25:52 +0000 Subject: [PATCH] Add signing workflow --- .github/workflows/signing.yml | 29 +++++++++++++++++++++++++++++ 1 file changed, 29 insertions(+) create mode 100644 .github/workflows/signing.yml diff --git a/.github/workflows/signing.yml b/.github/workflows/signing.yml new file mode 100644 index 0000000..0a75851 --- /dev/null +++ b/.github/workflows/signing.yml @@ -0,0 +1,29 @@ +name: Sign release assets + +on: + workflow_dispatch: + inputs: + tag: + description: 'Tag to sign' + required: true + type: string +jobs: + sign-assets: + runs-on: ubuntu-latest + steps: + - name: Install gpg + run: | + sudo apt-get update + sudo apt-get install -y gnupg + - name: Import GPG key + run: | + echo "${{ secrets.TEST_GPG_KEY }}" | base64 --decode | gpg --import + - name: Sign assets + uses: cawllec/bugsnag-release-signer@initial-work + with: + github_token: ${{ secrets.GITHUB_TOKEN }} + release_tag: ${{ github.event.inputs.tag }} + key_id: ${{ secrets.TEST_GPG_KEY_ID }} + key_passphrase: ${{ secrets.TEST_GPG_PASSPHRASE }} + organization: ${{ github.event.organization }} + repository: ${{ github.event.repository }}