ci(release): sign rpm and deb packages

Signed-off-by: Niccolò Fei <[email protected]>
NiccoloFei · Sep 19, 2024 · 0b300f4 · 0b300f4
1 parent b3e496d
commit 0b300f4
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 0 deletions.
diff --git a/.github/workflows/release-publish.yml b/.github/workflows/release-publish.yml
@@ -140,9 +140,12 @@ jobs:
           passphrase: ${{ secrets.GPG_PASSPHRASE }}
       -
         name: Set GoReleaser environment
+        env:
+          GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
         run: |
           echo GOPATH=$(go env GOPATH) >> $GITHUB_ENV
           echo PWD=$(pwd) >> $GITHUB_ENV
+          echo "$GPG_PRIVATE_KEY" > gpg_signing_key.asc
       -
         name: Run GoReleaser
         uses: goreleaser/goreleaser-action@v6
@@ -156,6 +159,7 @@ jobs:
           VERSION: ${{ steps.build-meta.outputs.version }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           GPG_FINGERPRINT: ${{ steps.import_gpg.outputs.fingerprint }}
+          NFPM_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
       -
         name: Publish Krew
         if: |

diff --git a/.goreleaser.yml b/.goreleaser.yml
@@ -93,6 +93,12 @@ nfpms:
     formats:
       - rpm
       - deb
+    rpm:
+      signature:
+        key_file: gpg_signing_key.asc
+    deb:
+      signature:
+        key_file: gpg_signing_key.asc
 
 checksum:
   name_template: '{{ .ProjectName }}-{{ .Version }}-checksums.txt'