Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Conversation

@winder
Copy link
Contributor

@winder winder commented Sep 13, 2023

Summary

Sign checksum file as part of publishing a release.

The approach here follows a suggestion in the goreleaser docs where the signature is limited to the checksum file.

References:

Repository configuration requires adding the GPG secret and passphrase.

Test Plan

Tested the configuration in a private repo:
https://github.com/algorand/goreleaser-test/releases/tag/untagged-e548c44def7b11988fec

@winder winder requested a review from a team September 13, 2023 15:46
@codecov
Copy link

codecov bot commented Sep 13, 2023

Codecov Report

Merging #1573 (9001a9d) into develop (d9c41d9) will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff            @@
##           develop    #1573   +/-   ##
========================================
  Coverage    68.58%   68.58%           
========================================
  Files           37       37           
  Lines         7417     7417           
========================================
  Hits          5087     5087           
  Misses        1903     1903           
  Partials       427      427           

📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more

@winder winder self-assigned this Sep 13, 2023
@winder winder added the Enhancement New feature or request label Sep 13, 2023
@winder winder changed the title Add gpg signature to checksum file. ci: Add gpg signature to checksum file. Sep 13, 2023
@winder winder merged commit 8f347f7 into algorand:develop Sep 13, 2023
@winder winder deleted the will/artifact-signing branch September 13, 2023 16:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Enhancement New feature or request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants