Merge pull request #1166 from nupplaphil/feat/drone_sha512

Sign drone artifacts per GPG
This commit is contained in:
Hypolite Petovan 2021-09-08 16:24:41 -04:00 committed by GitHub
commit 28e70485c5
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -126,9 +126,21 @@ steps:
- cd ./build
- sha256sum "$ARTIFACT" > "$ARTIFACT.sum256"
- ls -lh
- # output the sha256 sum for checking purpose
- # output the sha256 sum for checking
- cat "$ARTIFACT.sum256"
- sha256sum "$ARTIFACT"
- name: Sign artifacts
image: plugins/gpgsign
settings:
key:
from_secret: gpg_key
passphrase:
from_secret: gpg_password
files:
- build/*
exclude:
- build/*.sum256
detach_sign: true
- name: Upload artifacts
image: alpine
environment:
@ -218,9 +230,21 @@ steps:
- cd ./build
- sha256sum "$ARTIFACT" > "$ARTIFACT.sum256"
- ls -lh
- # output the sha256 sum for checking purpose
- # output the sha256 sum for checking
- cat "$ARTIFACT.sum256"
- sha256sum "$ARTIFACT"
- name: Sign artifacts
image: plugins/gpgsign
settings:
key:
from_secret: gpg_key
passphrase:
from_secret: gpg_password
files:
- build/*
exclude:
- build/*.sum256
detach_sign: true
- name: Upload artifacts
image: alpine
environment: