prokop/thgtoa
1
0
Fork 0
mirror of https://github.com/Anon-Planet/thgtoa.git synced 2026-05-06 19:44:19 +02:00
Code Issues Packages Projects Releases Wiki Activity

The GPG bit fails, let's try again

Browse Source 
Signed-off-by: nopeitsnothing <no@anonymousplanet.org>
This commit is contained in:
nopeitsnothing
2026-04-19 00:25:57 -04:00
parent c0eb8aa6f3
commit 655e47fb8d
1 changed files with 15 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/build-sign-release.yml
+15 -4
View File
@@ -83,13 +83,24 @@ jobs:
run: | run: |
cd ${{ github.workspace }} cd ${{ github.workspace }}
# Import GPG key (if not already imported) # Import GPG key if not already imported
export GPG_TTY=$(tty) export GPG_TTY=$(tty)
echo "$GPG_KEY" | gpg --batch --import 2>/dev/null || true echo "$GPG_KEY" | gpg --batch --import 2>/dev/null || true
# Sign the PDFs with detach signatures # Sign each PDF file individually with detached signature
gpg --batch --yes --armor --detach-sign --output export/thgtoa.pdf.sig export/thgtoa.pdf 2>/dev/null || true for pdf_file in export/*.pdf; do
gpg --batch --yes --armor --detach-sign --output export/thgtoa-dark.pdf.sig export/thgtoa-dark.pdf 2>/dev/null || true if [ -f "$pdf_file" ]; then
base_name=$(basename "$pdf_file")
echo "Signing $base_name..."
gpg --batch --yes --armor --detach-sign --output "export/${pdf_file}.sig" "$pdf_file" 2>/dev/null || true
fi
done
# Verify signatures were created
ls -la export/*.sig 2>/dev/null || echo "No signature files found in export/"
env:
GPG_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
- name: 🦠 Upload PDFs to VirusTotal - name: 🦠 Upload PDFs to VirusTotal
uses: crazy-max/ghaction-virustotal@v5 uses: crazy-max/ghaction-virustotal@v5