Manually setup/import gpg key

GH action doesn't support sign-only keys. [1]: crazy-max/ghaction-import-gpg#58
adborden · May 2, 2021 · 6d393b8 · 6d393b8
1 parent 21ac33d
commit 6d393b8
Showing 1 changed file with 10 additions and 5 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -11,15 +11,20 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v2
-      - name: import GPG key
-        id: import_gpg
-        uses: crazy-max/ghaction-import-gpg@v3
-        with:
-          gpg-private-key: ${{ secrets.GPG_PRIVATE_KEY }}
+      - name: import GPG signing key
+        run: |
+          gpg-agent --daemon
+
+          private_key=$(mktemp)
+          echo '${{ secrets.GPG_PRIVATE_KEY }}' > $private_key
+          gpg --import $private_key
+          rm $private_key
       - run: make build sign
       - name: release
         uses: softprops/action-gh-release@v1
         with:
           draft: true
           files: |
             build/*
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}