Verify signed release

Signed-off-by: Stefan Prodan <[email protected]>
fluxcd · Jun 30, 2023 · a92d965 · a92d965
1 parent bb099fa
commit a92d965
Showing 1 changed file with 6 additions and 2 deletions.
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -36,8 +36,12 @@ jobs:
  - name: Verify signed release
  if: startsWith(github.ref, 'refs/tags/v')
  run: |
- git -P show ${GITHUB_REF_NAME} | grep -q 'PGP SIGNATURE' || \
- { echo "No PGP signature found for tag ${GITHUB_REF_NAME}. Aborting release process..."; exit 1; }
+ if git -P show ${GITHUB_REF_NAME} | grep -q 'END PGP SIGNATURE'; then
+ echo "PGP signature found for ${GITHUB_REF_NAME} tag."
+ else
+ echo "No PGP signature found for tag ${GITHUB_REF_NAME}. Aborting release process..."
+ exit 1
+ fi
  - name: Prepare
  id: prep
  run: |