From f0eba1a3058c87fb5cb2a9513fd5f97c75f6c649 Mon Sep 17 00:00:00 2001
From: Philipp <admin@philipp.info>
Date: Wed, 8 Sep 2021 21:54:36 +0200
Subject: [PATCH] Add GPG sign

---
 .drone.yml | 28 ++++++++++++++++++++++++++--
 1 file changed, 26 insertions(+), 2 deletions(-)

diff --git a/.drone.yml b/.drone.yml
index c034f291..3be1aa2d 100644
--- a/.drone.yml
+++ b/.drone.yml
@@ -126,9 +126,21 @@ steps:
       - cd ./build
       - sha256sum "$ARTIFACT" > "$ARTIFACT.sum256"
       - ls -lh
-      - # output the sha256 sum for checking purpose
+      - # output the sha256 sum for checking
       - cat "$ARTIFACT.sum256"
       - sha256sum "$ARTIFACT"
+  - name: Sign artifacts
+    image: plugins/gpgsign
+    settings:
+      key:
+        from_secret: gpg_key
+      passphrase:
+        from_secret: gpg_password
+      files:
+        - build/*
+      exclude:
+        - build/*.sum256
+      detach_sign: true
   - name: Upload artifacts
     image: alpine
     environment:
@@ -218,9 +230,21 @@ steps:
       - cd ./build
       - sha256sum "$ARTIFACT" > "$ARTIFACT.sum256"
       - ls -lh
-      - # output the sha256 sum for checking purpose
+      - # output the sha256 sum for checking
       - cat "$ARTIFACT.sum256"
       - sha256sum "$ARTIFACT"
+  - name: Sign artifacts
+    image: plugins/gpgsign
+    settings:
+      key:
+        from_secret: gpg_key
+      passphrase:
+        from_secret: gpg_password
+      files:
+        - build/*
+      exclude:
+        - build/*.sum256
+      detach_sign: true
   - name: Upload artifacts
     image: alpine
     environment: