Update releaser workflow to sign repo files.

icemarkom · Nov 27, 2021 · de750da · de750da
1 parent 4709808
commit de750da
Showing 1 changed file with 24 additions and 3 deletions.
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -1,4 +1,4 @@
-name: goreleaser
+name: releaser
 
 on:
   push:
@@ -9,7 +9,7 @@ permissions:
   contents: write
 
 jobs:
-  goreleaser:
+  releaser:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
@@ -27,4 +27,25 @@ jobs:
           version: latest
           args: release --rm-dist
         env:
-          GITHUB_TOKEN: ${{ secrets.TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.TOKEN }}
+      - name: Import GPG key
+        uses: crazy-max/ghaction-import-gpg@v4
+        with:
+          gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
+          passphrase: ${{ secrets.GPG_PASSPHRASE }}
+      - name: Run apt-ftparchive
+        working-directory: dist
+        run: |
+          apt-ftparchive packages . > Packages && \
+          apt-ftparchive release . > Release
+      - name: Sign Release
+        working-directory: dist
+        run: |
+          gpg -abs -o Release.gpg Release &&
+          gpg --clearsign -o InRelease Release
+      - name: Upload Packages and Release manually
+        uses: alexellis/upload-assets@0.2.2
+        env:
+          GITHUB_TOKEN: ${{ secrets.TOKEN }}
+        with:
+          asset_paths: '[ "./dist/Packages", "./dist/*Release*" ]'