Skip to content

enabling package signing #22

enabling package signing

enabling package signing #22

Workflow file for this run

name: Release Charts
on:
push:
branches:
- main
- feature/FAC-158_gain-more-artifacthub-recognition
jobs:
release:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v4
with:
fetch-depth: 0
- name: Configure Git
run: |
git config user.name "$GITHUB_ACTOR"
git config user.email "[email protected]"
- name: Prepare GPG Key
run: |
echo "# Import the GPG Key"
echo "$GPG_PRIVATE_KEY" | gpg --batch --import
echo "Create passphrase file"
echo "$GPG_PASSPHRASE" > passphrase.txt
echo "Store the GPG key ID to a file"
GPG_KEY_ID=$(gpg --list-secret-keys --with-colons | grep 'sec' | cut -d: -f5)
echo "$GPG_KEY_ID" > gpg_key_id.txt
env:
GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
- name: Create .cr.yaml
run: |
cat <<EOF > .cr.yaml
sign: true
# Read the key from the file.
key: "$(cat gpg_key_id.txt)"
passphrase-file: "passphrase.txt"
EOF
- name: Run chart-releaser
uses: helm/[email protected]
with:
config: .cr.yaml
env:
CR_TOKEN: "${{ secrets.GITHUB_TOKEN }}"