From 8b98031d39251f287eb65becfe3748e13e704fb8 Mon Sep 17 00:00:00 2001 From: nopeitsnothing Date: Sat, 27 Jun 2026 23:34:22 -0400 Subject: [PATCH] chore(build): 02-sign.yml uses incorrect gpg settings Use a fpr match to lock a specific key Signed-off-by: nopeitsnothing --- .github/workflows/02-sign.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/02-sign.yml b/.github/workflows/02-sign.yml index cb68792..dd8894b 100644 --- a/.github/workflows/02-sign.yml +++ b/.github/workflows/02-sign.yml @@ -128,9 +128,12 @@ jobs: run: | mkdir -p ~/.gnupg echo "$GPG_PRIVATE_KEY" | gpg --batch --quiet --import > /dev/null 2>&1 || true + FINGERPRINT=$(gpg --batch --list-secret-keys --with-colons 2>/dev/null \ + | awk -F: '/^fpr/ { print $10; exit }') git config --global commit.gpgSign true git config --global gpg.program gpg git config --global gpg.exectimeout 180 + git config --global user.signingkey "$FINGERPRINT" git config --global user.name "github-actions[bot]" git config --global user.email "github-actions[bot]@users.noreply.github.com"