One job to rule them all

Signed-off-by: nopeitsnothing <no@anonymousplanet.org>
This commit is contained in:
nopeitsnothing
2026-04-19 00:46:00 -04:00
parent 7bc3ed6bb6
commit 28556c016c
+8 -7
View File
@@ -69,12 +69,7 @@ jobs:
export GPG_TTY=$(tty) export GPG_TTY=$(tty)
echo "$GPG_KEY" | gpg --batch --import 2>/dev/null || true echo "$GPG_KEY" | gpg --batch --import 2>/dev/null || true
# Create combined hash file with all PDFs
sha256sum export/thgtoa.pdf > export/checksums.sha256
sha256sum export/thgtoa-dark.pdf >> export/checksums.sha256
# Sign the checksum file
gpg --batch --yes --armor --detach-sign --output export/checksums.sha256.sig export/checksums.sha256 2>/dev/null || true
- name: 🔒 Sign PDF files with GPG - name: 🔒 Sign PDF files with GPG
env: env:
@@ -87,6 +82,13 @@ jobs:
export GPG_TTY=$(tty) export GPG_TTY=$(tty)
echo "$GPG_KEY" | gpg --batch --import 2>/dev/null || true echo "$GPG_KEY" | gpg --batch --import 2>/dev/null || true
# Create combined hash file with all PDFs
sha256sum export/thgtoa.pdf > export/checksums.sha256
sha256sum export/thgtoa-dark.pdf >> export/checksums.sha256
# Sign the checksum file
gpg --batch --yes --armor --detach-sign --output export/checksums.sha256.sig export/checksums.sha256 2>/dev/null || true
# Sign each PDF file individually with detached signature # Sign each PDF file individually with detached signature
for pdf_file in export/*.pdf; do for pdf_file in export/*.pdf; do
if [ -f "$pdf_file" ]; then if [ -f "$pdf_file" ]; then
@@ -137,8 +139,7 @@ jobs:
path: | path: |
export/*.pdf export/*.pdf
export/*.sig export/*.sig
export/checksums.sha256 export/*.sha256
export/checksums.sha256.sig
export/virus-total-results.md export/virus-total-results.md
if-no-files-found: error if-no-files-found: error
retention-days: 90 retention-days: 90