Upgrade to the latest helm release signer (#7)

Signed-off-by: Nicholas Walter Knize <[email protected]>
lucenia · Jul 17, 2024 · b018f05 · b018f05
1 parent df79908
commit b018f05
Showing 1 changed file with 8 additions and 15 deletions.
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -21,18 +21,9 @@ jobs:
           git config user.email "[email protected]"
 
       - name: Prepare GPG Key
-        run: | 
-          gpg_dir=.cr-gpg
-          mkdir "$gpg_dir"
-          keyring="$gpg_dir/secring.gpg"
-          base64 -d <<< "$GPG_KEYRING_BASE64" > "$keyring"
-          passphrase_file="$gpg_dir/passphrase"
-          echo "$RELEASE_PHRASE" > "$passphrase_file"
-          echo "CR_PASSPHRASE_FILE=$passphrase_file" >> "$GITHUB_ENV"
-          echo "CR_KEYRING=$keyring" >> "$GITHUB_ENV"
-        env:
-          GPG_KEYRING_BASE64: "${{ secrets.GPG_KEYRING_BASE64 }}"
-          GPG_PASSPHRASE: "${{ secrets.RELEASE_PHRASE }}"
+        run: |
+          echo "${{ secrets.RELEASE_SECRET }}" | gpg --dearmor --output keyring.gpg
+          echo "${{ secrets.RELEASE_PHRASE }}" > passphrase-file.txt
 
       - name: Install Helm
         uses: azure/setup-helm@v1
@@ -42,8 +33,10 @@ jobs:
       # See https://github.com/helm/chart-releaser
       # See https://github.com/helm/chart-releaser-action
       - name: Run chart-releaser
-        uses: helm/[email protected]
-        with:
-          config: cr.yaml
+        uses: helm/[email protected]
         env:
+          CR_KEY: Lucenia Dev (RELEASE SIGNING KEY) <[email protected]>
+          CR_KEYRING: keyring.gpg
+          CR_PASSPHRASE_FILE: passphrase-file.txt
+          CR_SIGN: true
           CR_TOKEN: "${{ secrets.GITHUB_TOKEN }}"