From 289c578d555539370d5779bb9b5662741a38b412 Mon Sep 17 00:00:00 2001 From: Tobias van Beek Date: Thu, 13 Apr 2023 22:36:09 +0200 Subject: [PATCH 1/2] Setup the signing of the phar file. Needed for Phive #397 --- .github/workflows/phar.yml | 19 ++++++++++++++----- 1 file changed, 14 insertions(+), 5 deletions(-) diff --git a/.github/workflows/phar.yml b/.github/workflows/phar.yml index 4962bfa28d..f09d4d0c9f 100644 --- a/.github/workflows/phar.yml +++ b/.github/workflows/phar.yml @@ -55,11 +55,18 @@ jobs: ant package -D-phar:filename=./pdepend.phar; ./pdepend.phar --version; - - name: Upload pdepend.phar - uses: actions/upload-artifact@v2 + - name: Sign phat + env: + PASSPHRASE: ${{ secrets.PASSPHRASE }} + SECRET_KEY: ${{ secrets.SECRET_KEY }} + run: gpg --command-fd 0 --pinentry-mode loopback -u pgp@pdepend.org --batch --detach-sign --output pdepend.phar.asc pdepend.phar + + - name: Upload pdepend.phar and pdepend.phar.asc + uses: actions/upload-artifact@v3 with: - name: pdepend.phar - path: pdepend.phar + path: | + pdepend.phar + pdepend.phar.asc - name: Release pdepend.phar if: github.event_name == 'release' @@ -67,4 +74,6 @@ jobs: env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} with: - args: 'pdepend.phar' + args: | + pdepend.phar + pdepend.phar.asc From e70efc7014a85b68af57586acd77e33e34fc33e6 Mon Sep 17 00:00:00 2001 From: Kyle Date: Fri, 14 Apr 2023 23:01:48 +0200 Subject: [PATCH 2/2] Fix typo --- .github/workflows/phar.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/phar.yml b/.github/workflows/phar.yml index f09d4d0c9f..e704e8e50c 100644 --- a/.github/workflows/phar.yml +++ b/.github/workflows/phar.yml @@ -55,7 +55,7 @@ jobs: ant package -D-phar:filename=./pdepend.phar; ./pdepend.phar --version; - - name: Sign phat + - name: Sign phar env: PASSPHRASE: ${{ secrets.PASSPHRASE }} SECRET_KEY: ${{ secrets.SECRET_KEY }}