Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS
Mirrored from https://github.com/Slazee/caddy.git
Synced Nov 14, 05:15 UTC
ci: reject tags if not signed by Matthew Holt's key (#3932)
* ci: reject tags if not signed by Matthew Holt's key * ci: don't reject tags if an intermediate commits are not signed
Mohammed Al Sahaf committed
Dec 29, 2020 at 22:52 UTC
2b90cdba52e2a4f160cdef829425bc01fbaa0d04
1 file changed
+10
.github/workflows/release.yml
+10
@@ -53,6 +53,16 @@ jobs:
53
echo "::set-output name=tag_patch::${TAG_PATCH}"
54
echo "::set-output name=tag_special::${TAG_SPECIAL}"
55
56
+ - name: Validate commits and tag signatures
57
+ run: |
58
+
59
+ # Import Matt Holt's key
60
+ curl 'https://github.com/mholt.gpg' | gpg --import
61
+
62
+ echo "Verifying the tag: ${{ steps.vars.outputs.version_tag }}"
63
+ # tags are only accepted if signed by Matt's key
64
+ git verify-tag "${{ steps.vars.outputs.version_tag }}" || exit 1
65
+
66
- name: Cache the build cache
67
uses: actions/cache@v2
68
with: