🔐 Add signing (#43)

stoe · Mar 25, 2023 · 6a76d60 · 6a76d60
1 parent 7a80121
commit 6a76d60
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 0 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -15,6 +15,13 @@ jobs:
     steps:
       - uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f
 
+      - uses: crazy-max/ghaction-import-gpg@v5
+        id: gpg
+        with:
+          gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
+          passphrase: ${{ secrets.GPG_PASSPHRASE }}
+
       - uses: cli/gh-extension-precompile@640911b0a0f2adb89a07a8ba547053cbd4001e1e
         with:
           go_version: 1.20.x
+          gpg_fingerprint: ${{ steps.gpg.outputs.fingerprint }}
diff --git a/.goreleaser.yml b/.goreleaser.yml
@@ -28,6 +28,9 @@ archives:
 checksum:
   name_template: "checksums.txt"
 
+signs:
+  - artifacts: checksum
+
 snapshot:
   name_template: "{{ incpatch .Version }}"