From a92d965afc7a6dac50dee9c4f5ea693df81226c6 Mon Sep 17 00:00:00 2001 From: Stefan Prodan Date: Fri, 30 Jun 2023 14:30:02 +0300 Subject: [PATCH] Verify signed release Signed-off-by: Stefan Prodan --- .github/workflows/release.yaml | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 65a6bdd..7b434c6 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -36,8 +36,12 @@ jobs: - name: Verify signed release if: startsWith(github.ref, 'refs/tags/v') run: | - git -P show ${GITHUB_REF_NAME} | grep -q 'PGP SIGNATURE' || \ - { echo "No PGP signature found for tag ${GITHUB_REF_NAME}. Aborting release process..."; exit 1; } + if git -P show ${GITHUB_REF_NAME} | grep -q 'END PGP SIGNATURE'; then + echo "PGP signature found for ${GITHUB_REF_NAME} tag." + else + echo "No PGP signature found for tag ${GITHUB_REF_NAME}. Aborting release process..." + exit 1 + fi - name: Prepare id: prep run: |