From d7d49ec0ed6be78f37f973a648f8b95f8622a8aa Mon Sep 17 00:00:00 2001 From: d3m0k1d Date: Fri, 16 Jan 2026 01:25:19 +0300 Subject: [PATCH] chore: delete gpg on release --- .gitea/workflows/CD.yml | 8 -------- .goreleaser.yml | 16 ---------------- 2 files changed, 24 deletions(-) diff --git a/.gitea/workflows/CD.yml b/.gitea/workflows/CD.yml index dbb24c6..a986c92 100644 --- a/.gitea/workflows/CD.yml +++ b/.gitea/workflows/CD.yml @@ -13,14 +13,6 @@ jobs: release: runs-on: ubuntu-latest steps: - - name: Install Gpg - run: apt-get update && apt-get install -y gnupg curl - - - name: Import GPG key - if: secrets.GPG_PRIVATE_KEY != null - run: | - echo "${{ secrets.GPG_PRIVATE_KEY }}" | gpg --batch --import - echo "${{ secrets.GPG_FINGERPRINT }}" | gpg --import-ownertrust - name: Install syft run: curl -sSfL https://get.anchore.io/syft | sudo sh -s -- -b /usr/local/bin - name: Checkout diff --git a/.goreleaser.yml b/.goreleaser.yml index ce95240..b46531e 100644 --- a/.goreleaser.yml +++ b/.goreleaser.yml @@ -55,22 +55,6 @@ checksum: name_template: "{{ .ProjectName }}_{{ .Version }}_checksums.txt" algorithm: sha256 -signs: - - cmd: gpg - args: - - "--batch" - - "--no-tty" - - "--pinentry-mode" - - "loopback" - - "-u" - - "{{ .Env.GPG_FINGERPRINT }}" - - "--output" - - "${signature}" - - "--detach-sign" - - "${artifact}" - stdin: "{{ .Env.GPG_PASSPHRASE }}" - artifacts: checksum - sboms: - artifacts: archive documents: