Add signing

.github/workflows/release.yml

@@ -17,6 +17,8 @@ jobs:
       - name: release dry run
         run: make release-dry-run
       - name: setup release environment
-        run: echo 'GITHUB_TOKEN=${{secrets.GITHUB_TOKEN}}' > .release-env
+        run: |
+          echo 'GITHUB_TOKEN=${{secrets.GITHUB_TOKEN}}' > .release-env
+          echo 'PRIVATE_KEY=${{secrets.PRIVATE_KEY}}' >> .release-env
       - name: release publish
         run: make release

.goreleaser.yaml

@@ -30,3 +30,11 @@ changelog:
     exclude:
       - '^docs:'
       - '^test:'
+signs:
+  - artifacts: checksum
+    args:
+      - "--batch"
+      - "--output"
+      - "${signature}"
+      - "--detach-sign"
+      - "${artifact}"

Makefile

@@ -9,7 +9,7 @@ release-dry-run:
 		-v `pwd`:/go/src/$(PACKAGE_NAME) \
 		-w /go/src/$(PACKAGE_NAME) \
 		ghcr.io/cloudquery/golang-cross:latest \
-		--rm-dist --skip-validate --skip-publish
+		--rm-dist --skip-validate --skip-publish --skip-sign
 
 .PHONY: release
 release: