Skip to content

Commit

Permalink
Put gpg fingerprint in vars
Browse files Browse the repository at this point in the history
The gpg fingerprint of the signature action testing key doesn't need to be a secret.
  • Loading branch information
bjoernricks committed Jan 16, 2024
1 parent 8e15754 commit 528b2e8
Showing 1 changed file with 3 additions and 2 deletions.
5 changes: 3 additions & 2 deletions .github/workflows/test-signature.yml
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,7 @@ on:
branches:
- main
pull_request:
workflow_dispatch:

jobs:
test-creating-signature-file:
Expand All @@ -20,7 +21,7 @@ jobs:
with:
gpg-key: ${{ secrets.TEST_GPG_KEY }}
gpg-passphrase: ${{ secrets.TEST_GPG_PASSPHRASE }}
gpg-fingerprint: ${{ secrets.TEST_GPG_FINGERPRINT }}
gpg-fingerprint: ${{ vars.TEST_GPG_FINGERPRINT }}
file: ./signature/action.yml
signature-file: test.asc
- name: Check the signature
Expand All @@ -31,7 +32,7 @@ jobs:
with:
gpg-key: ${{ secrets.TEST_GPG_KEY }}
gpg-passphrase: ${{ secrets.TEST_GPG_PASSPHRASE }}
gpg-fingerprint: ${{ secrets.TEST_GPG_FINGERPRINT }}
gpg-fingerprint: ${{ vars.TEST_GPG_FINGERPRINT }}
file: ./signature/action.yml
- name: Check the signature
run: |
Expand Down

0 comments on commit 528b2e8

Please sign in to comment.