Merge pull request #10681 from nupplaphil/feat/drone_sha512

Add GPG signing for drone artifacts
This commit is contained in:
Hypolite Petovan 2021-09-08 18:45:58 -04:00 committed by GitHub
commit 43fe1341f9
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -398,6 +398,18 @@ steps:
- # output the sha256 sum for checking
- cat "$ARTIFACT.sum256"
- sha256sum "$ARTIFACT"
- name: Sign artifacts
image: plugins/gpgsign
settings:
key:
from_secret: gpg_key
passphrase:
from_secret: gpg_password
files:
- build/*
exclude:
- build/*.sum256
detach_sign: true
- name: Upload artifacts
image: alpine
environment:
@ -479,8 +491,6 @@ steps:
- apt-get install bzip2
- mkdir ./build
- export VERSION="$(cat VERSION)"
- mkdir ./build
- export VERSION="$(cat VERSION)"
- # Create artifact
- export RELEASE="friendica-full-$VERSION"
- export ARTIFACT="$RELEASE.tar.gz"
@ -496,6 +506,18 @@ steps:
- # output the sha256 sum for checking
- cat "$ARTIFACT.sum256"
- sha256sum "$ARTIFACT"
- name: Sign artifacts
image: plugins/gpgsign
settings:
key:
from_secret: gpg_key
passphrase:
from_secret: gpg_password
files:
- build/*
exclude:
- build/*.sum256
detach_sign: true
- name: Upload artifacts
image: alpine
environment: