Skip to content

v0.0.5

Latest

Choose a tag to compare

@github-actions github-actions released this 21 Sep 08:58
33201f6
Import the GPG key with plain gpg, not a third-party action

crazy-max/ghaction-import-gpg was handed the private key material
directly; replace it with a two-line gpg --batch --import, which does
the same job using only the runner's built-in gpg, no external action
in the trust chain for the signing key.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>