ci: sign tags by default

aeharding · Nov 13, 2024 · c3b8dee · c3b8dee
1 parent c687a54
commit c3b8dee
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -117,6 +117,7 @@ jobs:
           passphrase: ${{ secrets.GPG_PASSPHRASE }}
           git_user_signingkey: true
           git_commit_gpgsign: true
+          git_tag_gpgsign: true
 
       - name: Commit and push release
         env:
@@ -131,6 +132,6 @@ jobs:
           git commit -S -m "release: ${{ needs.app_version.outputs.app_version }} (${{ needs.app_build.outputs.app_build }})"
           TAG_NAME="${{ needs.app_version.outputs.app_version }}"
           echo "Creating tag: $TAG_NAME"
-          git tag -s "$TAG_NAME"
+          git tag "$TAG_NAME"
           git push origin "release/${{ needs.app_version.outputs.app_version }}"
           git push origin "$TAG_NAME"