Skip to content

Commit

Permalink
chore: add GPG key import to sign tag in release process
Browse files Browse the repository at this point in the history
  • Loading branch information
RomanBredehoft committed Aug 29, 2023
1 parent a62a78b commit 7a1caf7
Showing 1 changed file with 9 additions and 0 deletions.
9 changes: 9 additions & 0 deletions .github/workflows/release.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -212,6 +212,15 @@ jobs:
RELEASE_BRANCH_NAME: ${{ needs.release-checks.outputs.release_branch_name }}

steps:
# Import GPG key in order to enable the Zama bot to sign all tags
- name: Import GPG key
uses: crazy-max/ghaction-import-gpg@v5
with:
gpg_private_key: ${{ secrets.BOT_GPG_PRIVATE_KEY }}
passphrase: ${{ secrets.BOT_GPG_PASSPHRASE }}
git_user_signingkey: true
git_tag_gpgsign: true

# For non-rc releases, create and push the release branch
- name: Create and push dot release branch to public repository
if: env.IS_RC == 'false'
Expand Down

0 comments on commit 7a1caf7

Please sign in to comment.