Removed invisible chars and printing of signing key in workflows file
All checks were successful
Package & Sign Helm Chart / build (release) Successful in 1m24s
All checks were successful
Package & Sign Helm Chart / build (release) Successful in 1m24s
This commit is contained in:
parent
c4fae1e2d8
commit
8ed24361bf
@ -31,12 +31,7 @@ jobs:
|
|||||||
passphrase: ${{ secrets.GPG_PASSPHRASE }}
|
passphrase: ${{ secrets.GPG_PASSPHRASE }}
|
||||||
trust_level: 5
|
trust_level: 5
|
||||||
|
|
||||||
- name: Show keys in runner
|
# 3) "Generation-1"-Secret-Ring für Helm erzeugen (TMP, 600 Rechte)
|
||||||
run: |
|
|
||||||
echo "🔑 Keys inside CI:"
|
|
||||||
gpg --list-secret-keys --keyid-format LONG
|
|
||||||
|
|
||||||
# 4) “Generation‑1”‑Secret‑Ring für Helm erzeugen (TMP, 600 Rechte)
|
|
||||||
- name: Build legacy secret-keyring
|
- name: Build legacy secret-keyring
|
||||||
run: |
|
run: |
|
||||||
set -euo pipefail
|
set -euo pipefail
|
||||||
@ -49,7 +44,7 @@ jobs:
|
|||||||
echo "$PASSPHRASE" > /tmp/gpgring/passphrase.txt
|
echo "$PASSPHRASE" > /tmp/gpgring/passphrase.txt
|
||||||
chmod 600 /tmp/gpgring/passphrase.txt
|
chmod 600 /tmp/gpgring/passphrase.txt
|
||||||
|
|
||||||
# 5) Chart bauen & signieren
|
# 4) Chart bauen & signieren
|
||||||
- name: Package & sign chart
|
- name: Package & sign chart
|
||||||
run: |
|
run: |
|
||||||
cp README.md "$CHART_DIR"/
|
cp README.md "$CHART_DIR"/
|
||||||
@ -61,7 +56,7 @@ jobs:
|
|||||||
--keyring /tmp/gpgring/secring.gpg \
|
--keyring /tmp/gpgring/secring.gpg \
|
||||||
--passphrase-file /tmp/gpgring/passphrase.txt
|
--passphrase-file /tmp/gpgring/passphrase.txt
|
||||||
|
|
||||||
# 6) In dein internes Chart‑Repo hochladen
|
# 5) In dein internes Chart-Repo hochladen
|
||||||
- name: Upload to ChartMuseum
|
- name: Upload to ChartMuseum
|
||||||
env:
|
env:
|
||||||
REPO_CREDENTIALS: ${{ secrets.REPO_CREDENTIALS }}
|
REPO_CREDENTIALS: ${{ secrets.REPO_CREDENTIALS }}
|
||||||
@ -71,7 +66,7 @@ jobs:
|
|||||||
-F "prov=@bookstack-$CHART_VERSION.tgz.prov" \
|
-F "prov=@bookstack-$CHART_VERSION.tgz.prov" \
|
||||||
https://charts.morlana.net/api/charts
|
https://charts.morlana.net/api/charts
|
||||||
|
|
||||||
# 7) Public‑Key aus Repo beilegen und als Release‑Asset anhängen
|
# 6) Public-Key aus Repo beilegen und als Release-Asset anhängen
|
||||||
- name: Attach release assets
|
- name: Attach release assets
|
||||||
uses: softprops/action-gh-release@v2
|
uses: softprops/action-gh-release@v2
|
||||||
with:
|
with:
|
||||||
@ -81,7 +76,7 @@ jobs:
|
|||||||
bookstack-${{ env.CHART_VERSION }}.tgz.prov
|
bookstack-${{ env.CHART_VERSION }}.tgz.prov
|
||||||
pubkeys/morlana.asc
|
pubkeys/morlana.asc
|
||||||
|
|
||||||
# 8) Aufräumen (optional, Runner ist ohnehin kurzlebig)
|
# 7) Aufräumen (optional, Runner ist ohnehin kurzlebig)
|
||||||
- name: Cleanup sensitive files
|
- name: Cleanup sensitive files
|
||||||
if: ${{ always() }}
|
if: ${{ always() }}
|
||||||
run: rm -rf /tmp/gpgring
|
run: rm -rf /tmp/gpgring
|
||||||
|
Loading…
x
Reference in New Issue
Block a user