max/nodarium
1
0
Fork 0
Code Issues 9 Pull Requests 1 Actions Packages Projects Releases 5 Wiki Activity

ci: sign release commits with pgp key
Some checks failed
🚀 Lint & Test & Deploy / release (push) Failing after 2m10s
Details

Browse Source
This commit is contained in:
release-bot
2026-02-10 15:47:42 +01:00
parent 22a11832b8
commit ee5ca81757
2 changed files with 13 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
.gitea/scripts/create-release.sh
View File

@@ -73,11 +73,19 @@ mv "$tmp_changelog" CHANGELOG.md
pnpm exec dprint fmt CHANGELOG.md
# -------------------------------------------------------------------
# 5. Create release commit
# 5. Setup GPG signing
# -------------------------------------------------------------------
git config user.name "release-bot"
git config user.email "release-bot@ci"
echo "$BOT_PGP_PRIVATE_KEY" | base64 -d | gpg --batch --import --
GPG_KEY_ID=$(gpg --list-secret-keys --keyid-format LONG nodarium-bot@max-richter.dev 2>/dev/null | grep sec | head -n1 | sed 's/.*\///' | tr -d ' ')
git config user.name "nodarium-bot"
git config user.email "nodarium-bot@max-richter.dev"
git config user.signingkey "$GPG_KEY_ID"
git config commit.gpgsign true
# -------------------------------------------------------------------
# 6. Create release commit
# -------------------------------------------------------------------
git add CHANGELOG.md $(find . -name package.json ! -path "*/node_modules/*")
if git diff --cached --quiet; then