Removed invisible chars and printing of signing key in workflows file
All checks were successful
Package & Sign Helm Chart / build (release) Successful in 1m24s

This commit is contained in:
Florian Weber 2025-06-12 19:50:18 +02:00
parent c4fae1e2d8
commit 8ed24361bf
Signed by: f.weber
GPG Key ID: B162B599E31221C6

View File

@ -31,12 +31,7 @@ jobs:
passphrase: ${{ secrets.GPG_PASSPHRASE }} passphrase: ${{ secrets.GPG_PASSPHRASE }}
trust_level: 5 trust_level: 5
- name: Show keys in runner # 3) "Generation-1"-Secret-Ring für Helm erzeugen (TMP, 600 Rechte)
run: |
echo "🔑 Keys inside CI:"
gpg --list-secret-keys --keyid-format LONG
# 4) “Generation1”SecretRing für Helm erzeugen (TMP, 600Rechte)
- name: Build legacy secret-keyring - name: Build legacy secret-keyring
run: | run: |
set -euo pipefail set -euo pipefail
@ -49,7 +44,7 @@ jobs:
echo "$PASSPHRASE" > /tmp/gpgring/passphrase.txt echo "$PASSPHRASE" > /tmp/gpgring/passphrase.txt
chmod 600 /tmp/gpgring/passphrase.txt chmod 600 /tmp/gpgring/passphrase.txt
# 5) Chart bauen & signieren # 4) Chart bauen & signieren
- name: Package & sign chart - name: Package & sign chart
run: | run: |
cp README.md "$CHART_DIR"/ cp README.md "$CHART_DIR"/
@ -61,7 +56,7 @@ jobs:
--keyring /tmp/gpgring/secring.gpg \ --keyring /tmp/gpgring/secring.gpg \
--passphrase-file /tmp/gpgring/passphrase.txt --passphrase-file /tmp/gpgring/passphrase.txt
# 6) In dein internes ChartRepo hochladen # 5) In dein internes Chart-Repo hochladen
- name: Upload to ChartMuseum - name: Upload to ChartMuseum
env: env:
REPO_CREDENTIALS: ${{ secrets.REPO_CREDENTIALS }} REPO_CREDENTIALS: ${{ secrets.REPO_CREDENTIALS }}
@ -71,7 +66,7 @@ jobs:
-F "prov=@bookstack-$CHART_VERSION.tgz.prov" \ -F "prov=@bookstack-$CHART_VERSION.tgz.prov" \
https://charts.morlana.net/api/charts https://charts.morlana.net/api/charts
# 7) PublicKey aus Repo beilegen und als ReleaseAsset anhängen # 6) Public-Key aus Repo beilegen und als Release-Asset anhängen
- name: Attach release assets - name: Attach release assets
uses: softprops/action-gh-release@v2 uses: softprops/action-gh-release@v2
with: with:
@ -81,7 +76,7 @@ jobs:
bookstack-${{ env.CHART_VERSION }}.tgz.prov bookstack-${{ env.CHART_VERSION }}.tgz.prov
pubkeys/morlana.asc pubkeys/morlana.asc
# 8) Aufräumen (optional, Runner ist ohnehin kurzlebig) # 7) Aufräumen (optional, Runner ist ohnehin kurzlebig)
- name: Cleanup sensitive files - name: Cleanup sensitive files
if: ${{ always() }} if: ${{ always() }}
run: rm -rf /tmp/gpgring run: rm -rf /tmp/gpgring