refactor: add GPG private key to release workflow for enhanced security

This commit is contained in:
arashagp
2025-01-02 11:18:57 +03:30
parent e05c377c55
commit 1f8ffd2f69

View File

@@ -17,10 +17,16 @@ on:
BOT_TOKEN:
required: true
description: "Nexim Bot token"
GPG_PRIVATE_KEY:
required: true
description: "GPG private key"
permissions:
contents: write
env:
GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
jobs:
main:
name: Build & Lint & Test & Release
@@ -35,7 +41,7 @@ jobs:
- name: 🙂‍↔️ Import GPG key
run: |
echo "${{ secrets.GPG_PRIVATE_KEY }}" | gpg --batch --import
echo "${{ env.GPG_PRIVATE_KEY }}" | gpg --batch --import
echo -e "5\ny\n" | gpg --batch --yes --command-fd 0 --edit-key ${{ secrets.GPG_KEY_ID }} trust quit
env:
GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY}}