From 15e639ca19f8e0ac284cf7f56fc46940c862cb26 Mon Sep 17 00:00:00 2001
From: Timur Zununbekov <t.zununbekov@gmail.com>
Date: Thu, 22 Feb 2024 12:33:48 +0600
Subject: [PATCH] Import gpg signing key

---
 .github/workflows/release.yml | 13 ++++++++-----
 1 file changed, 8 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 1ee28374aa..c5f8f86f99 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -10,11 +10,9 @@ env:
   AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
   AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
   AWS_EC2_METADATA_DISABLED: true
-  GPG_SIGNING_KEY: ${{ secrets.GPG_SIGNING_KEY }}
 
 jobs:
   release-snapshot:
-    permissions: write-all
     runs-on: ubuntu-latest
     if: github.ref == 'refs/heads/master'
 
@@ -45,9 +43,12 @@ jobs:
            password: ${{ secrets.DOCKERHUB_PASSWORD }}
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
-
       - name: Install Deb build scripts
         run: sudo apt-get install devscripts build-essential lintian dput dh-make
+      - name: Import GPG key
+        uses: crazy-max/ghaction-import-gpg@v6
+        with:
+          gpg_private_key: ${{ secrets.GPG_SIGNING_KEY }}
 
       - name: Release snapshot
         run: |
@@ -59,7 +60,6 @@ jobs:
         run: bin/release_goreport
 
   release-tag:
-    permissions: write-all
     runs-on: ubuntu-latest
     if: github.ref_type == 'tag'
 
@@ -90,9 +90,12 @@ jobs:
            password: ${{ secrets.DOCKERHUB_PASSWORD }}
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
-
       - name: Install Deb build scripts
         run: sudo apt-get install devscripts build-essential lintian dput dh-make
+      - name: Import GPG key
+        uses: crazy-max/ghaction-import-gpg@v6
+        with:
+          gpg_private_key: ${{ secrets.GPG_SIGNING_KEY }}
 
       - name: Release tag
         run: |