Merge pull request #10681 from nupplaphil/feat/drone_sha512
Add GPG signing for drone artifacts
This commit is contained in:
		
				commit
				
					
						43fe1341f9
					
				
			
		
					 1 changed files with 24 additions and 2 deletions
				
			
		
							
								
								
									
										26
									
								
								.drone.yml
									
										
									
									
									
								
							
							
						
						
									
										26
									
								
								.drone.yml
									
										
									
									
									
								
							|  | @ -398,6 +398,18 @@ steps: | ||||||
|       - # output the sha256 sum for checking |       - # output the sha256 sum for checking | ||||||
|       - cat "$ARTIFACT.sum256" |       - cat "$ARTIFACT.sum256" | ||||||
|       - sha256sum "$ARTIFACT" |       - sha256sum "$ARTIFACT" | ||||||
|  |   - name: Sign artifacts | ||||||
|  |     image: plugins/gpgsign | ||||||
|  |     settings: | ||||||
|  |       key: | ||||||
|  |         from_secret: gpg_key | ||||||
|  |       passphrase: | ||||||
|  |         from_secret: gpg_password | ||||||
|  |       files: | ||||||
|  |         - build/* | ||||||
|  |       exclude: | ||||||
|  |         - build/*.sum256 | ||||||
|  |       detach_sign: true | ||||||
|   - name: Upload artifacts |   - name: Upload artifacts | ||||||
|     image: alpine |     image: alpine | ||||||
|     environment: |     environment: | ||||||
|  | @ -479,8 +491,6 @@ steps: | ||||||
|       - apt-get install bzip2 |       - apt-get install bzip2 | ||||||
|       - mkdir ./build |       - mkdir ./build | ||||||
|       - export VERSION="$(cat VERSION)" |       - export VERSION="$(cat VERSION)" | ||||||
|       - mkdir ./build |  | ||||||
|       - export VERSION="$(cat VERSION)" |  | ||||||
|       - # Create artifact |       - # Create artifact | ||||||
|       - export RELEASE="friendica-full-$VERSION" |       - export RELEASE="friendica-full-$VERSION" | ||||||
|       - export ARTIFACT="$RELEASE.tar.gz" |       - export ARTIFACT="$RELEASE.tar.gz" | ||||||
|  | @ -496,6 +506,18 @@ steps: | ||||||
|       - # output the sha256 sum for checking |       - # output the sha256 sum for checking | ||||||
|       - cat "$ARTIFACT.sum256" |       - cat "$ARTIFACT.sum256" | ||||||
|       - sha256sum "$ARTIFACT" |       - sha256sum "$ARTIFACT" | ||||||
|  |   - name: Sign artifacts | ||||||
|  |     image: plugins/gpgsign | ||||||
|  |     settings: | ||||||
|  |       key: | ||||||
|  |         from_secret: gpg_key | ||||||
|  |       passphrase: | ||||||
|  |         from_secret: gpg_password | ||||||
|  |       files: | ||||||
|  |         - build/* | ||||||
|  |       exclude: | ||||||
|  |         - build/*.sum256 | ||||||
|  |       detach_sign: true | ||||||
|   - name: Upload artifacts |   - name: Upload artifacts | ||||||
|     image: alpine |     image: alpine | ||||||
|     environment: |     environment: | ||||||
|  |  | ||||||
		Loading…
	
	Add table
		Add a link
		
	
		Reference in a new issue