Sign the Release SHA files (#57)

nolte · Aug 21, 2020 · 09ce47d · 09ce47d
1 parent 83bd5fb
commit 09ce47d
Show file tree

Hide file tree

Showing 3 changed files with 11 additions and 1 deletion.
diff --git a/.github/workflows/gorelease.yaml b/.github/workflows/gorelease.yaml
@@ -20,6 +20,13 @@ jobs:
         with:
           fetch-depth: 0
 
+      - name: Import GPG key
+        id: import_gpg
+        uses: crazy-max/ghaction-import-gpg@v2
+        env:
+          GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
+          PASSPHRASE: ${{ secrets.PASSPHRASE }}
+
       - name: test provider
         run: |
           make generate
@@ -31,3 +38,4 @@ jobs:
           args: release --rm-dist
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GPG_FINGERPRINT: ${{ steps.import_gpg.outputs.fingerprint }}
diff --git a/.goreleaser.yml b/.goreleaser.yml
@@ -25,6 +25,9 @@ builds:
       - goos: darwin
         goarch: '386'
     binary: '{{ .ProjectName }}_v{{ .Version }}'
+signs:
+  - artifacts: checksum
+    args: ["--batch", "-u", "{{ .Env.GPG_FINGERPRINT }}", "--output", "${signature}", "--detach-sign", "${artifact}"]
 archives:
   - format: zip
     name_template: '{{ .ProjectName }}_{{ .Version }}_{{ .Os }}_{{ .Arch }}'

diff --git a/tools/magefile.go b/tools/magefile.go
@@ -225,7 +225,6 @@ func terraformCustomDataDir() string {
 	check(err)
 	return filepath.Join(home, ".local/share/terraform/plugins")
 }
-
 func (Build) TerraformInstallProvider() {
 
 	distPath := "../dist/terraform-provider-harbor_linux_amd64"