Merge pull request #78 from fluxcd/verify-pgp

Verify signed release
fluxcd · Jun 30, 2023 · cc213e7 · cc213e7
2 parents bb099fa + a92d965
commit cc213e7
Showing 1 changed file with 6 additions and 2 deletions.
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -36,8 +36,12 @@ jobs:
       - name: Verify signed release
         if: startsWith(github.ref, 'refs/tags/v')
         run: |
-          git -P show ${GITHUB_REF_NAME} | grep -q 'PGP SIGNATURE' || \
-          { echo "No PGP signature found for tag ${GITHUB_REF_NAME}. Aborting release process..."; exit 1; }
+          if git -P show ${GITHUB_REF_NAME} | grep -q 'END PGP SIGNATURE'; then
+            echo "PGP signature found for ${GITHUB_REF_NAME} tag."
+          else
+            echo "No PGP signature found for tag  ${GITHUB_REF_NAME}. Aborting release process..."
+            exit 1
+          fi
       - name: Prepare
         id: prep
         run: |