Skip to content

Commit

Permalink
Merge pull request #80 from fluxcd/vtag
Browse files Browse the repository at this point in the history
Verify signed tag
  • Loading branch information
stefanprodan committed Jun 30, 2023
2 parents 6f8e7fe + bd340bb commit e63acba
Showing 1 changed file with 3 additions and 1 deletion.
4 changes: 3 additions & 1 deletion .github/workflows/release.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -36,7 +36,9 @@ jobs:
- name: Verify signed release
if: startsWith(github.ref, 'refs/tags/v')
run: |
if git tag -v ${GITHUB_REF_NAME} | grep 'no signature found'; then
if git tag -v ${GITHUB_REF_NAME} 2>&1 | grep 'Signature made'; then
echo "PGP signature found for ${GITHUB_REF_NAME} tag."
else
echo "No PGP signature found for tag ${GITHUB_REF_NAME}. Aborting release process..."
exit 1
fi
Expand Down

0 comments on commit e63acba

Please sign in to comment.