mexon/friendica
1
0
Fork 0
Code Pull requests Activity

Merge pull request #10681 from nupplaphil/feat/drone_sha512

Browse source 
Add GPG signing for drone artifacts
This commit is contained in:
Hypolite Petovan 2021-09-08 18:45:58 -04:00 committed by GitHub
commit 43fe1341f9
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 24 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

26
.drone.yml
View file

@ -398,6 +398,18 @@ steps:
- # output the sha256 sum for checking - # output the sha256 sum for checking
- cat "$ARTIFACT.sum256" - cat "$ARTIFACT.sum256"
- sha256sum "$ARTIFACT" - sha256sum "$ARTIFACT"
- name: Sign artifacts
image: plugins/gpgsign
settings:
key:
from_secret: gpg_key
passphrase:
from_secret: gpg_password
files:
- build/*
exclude:
- build/*.sum256
detach_sign: true
- name: Upload artifacts - name: Upload artifacts
image: alpine image: alpine
environment: environment:
@ -479,8 +491,6 @@ steps:
- apt-get install bzip2 - apt-get install bzip2
- mkdir ./build - mkdir ./build
- export VERSION="$(cat VERSION)" - export VERSION="$(cat VERSION)"
- mkdir ./build
- export VERSION="$(cat VERSION)"
- # Create artifact - # Create artifact
- export RELEASE="friendica-full-$VERSION" - export RELEASE="friendica-full-$VERSION"
- export ARTIFACT="$RELEASE.tar.gz" - export ARTIFACT="$RELEASE.tar.gz"
@ -496,6 +506,18 @@ steps:
- # output the sha256 sum for checking - # output the sha256 sum for checking
- cat "$ARTIFACT.sum256" - cat "$ARTIFACT.sum256"
- sha256sum "$ARTIFACT" - sha256sum "$ARTIFACT"
- name: Sign artifacts
image: plugins/gpgsign
settings:
key:
from_secret: gpg_key
passphrase:
from_secret: gpg_password
files:
- build/*
exclude:
- build/*.sum256
detach_sign: true
- name: Upload artifacts - name: Upload artifacts
image: alpine image: alpine
environment: environment: