diff --git a/.github/workflows/community_beta.yml b/.github/workflows/community_beta.yml index 627df6581..e4f482e02 100644 --- a/.github/workflows/community_beta.yml +++ b/.github/workflows/community_beta.yml @@ -56,6 +56,7 @@ jobs: GITHUB_TOKEN=${{ github.token }} \ PROJECT_NAME=semaphore_community \ GPG_KEY_ID="${{ vars.GPG_KEY_ID }}" \ + GPG_PASS="${{ secrets.GPG_PASS }}" \ task release:prod deploy-beta: diff --git a/.github/workflows/community_release.yml b/.github/workflows/community_release.yml index 85ae3ca73..7441c432b 100644 --- a/.github/workflows/community_release.yml +++ b/.github/workflows/community_release.yml @@ -55,6 +55,7 @@ jobs: run: | GITHUB_TOKEN=${{ github.token }} \ GPG_KEY_ID="${{ vars.GPG_KEY_ID }}" \ + GPG_PASS="${{ secrets.GPG_PASS }}" \ PROJECT_NAME=semaphore_community \ task release:prod diff --git a/.github/workflows/pro_selfhosted_beta.yml b/.github/workflows/pro_selfhosted_beta.yml index 942b7ad26..b0dff6d7e 100644 --- a/.github/workflows/pro_selfhosted_beta.yml +++ b/.github/workflows/pro_selfhosted_beta.yml @@ -62,6 +62,7 @@ jobs: APP_BUILD_TYPE=pro_selfhosted \ GITHUB_TOKEN=${{ github.token }} \ GPG_KEY_ID="${{ vars.GPG_KEY_ID }}" \ + GPG_PASS="${{ secrets.GPG_PASS }}" \ PROJECT_NAME=semaphore \ task release:prod diff --git a/.github/workflows/pro_selfhosted_release.yml b/.github/workflows/pro_selfhosted_release.yml index 4a4247635..bee704099 100644 --- a/.github/workflows/pro_selfhosted_release.yml +++ b/.github/workflows/pro_selfhosted_release.yml @@ -60,6 +60,7 @@ jobs: APP_BUILD_TYPE=pro_selfhosted \ GITHUB_TOKEN=${{ github.token }} \ GPG_KEY_ID="${{ vars.GPG_KEY_ID }}" \ + GPG_PASS="${{ secrets.GPG_PASS }}" \ PROJECT_NAME=semaphore \ task release:prod diff --git a/.goreleaser.yml b/.goreleaser.yml index 243a2b348..63a2144c7 100644 --- a/.goreleaser.yml +++ b/.goreleaser.yml @@ -54,14 +54,10 @@ signs: - artifacts: checksum signature: "{{ .Env.PROJECT_NAME }}_{{ .Version }}_checksums.txt.sig" - cmd: gpg + cmd: sh args: [ - "-u", "{{ .Env.GPG_KEY_ID }}", - "--pinentry-mode", "loopback", - "--yes", - "--batch", - "--output", "${signature}", - "--detach-sign", "${artifact}" + "-c", + "printf '%s' \"$GPG_PASS\" | gpg -u \"{{ .Env.GPG_KEY_ID }}\" --pinentry-mode loopback --yes --batch --passphrase-fd 0 --output \"${signature}\" --detach-sign \"${artifact}\"" ] checksum: