Merge pull request #992 from GaloisInc/T990

CI: Use modern GPG keys
GaloisInc · May 19, 2022 · 1d2d95d · 1d2d95d
2 parents c3890ce + 7af296b
commit 1d2d95d
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/.github/ci.sh b/.github/ci.sh
@@ -94,9 +94,11 @@ install_system_deps() {
 }
 
 sign() {
+  # This is surrounded with `set +x; ...; set -x` to disable printing out
+  # statements that could leak GPG-related secrets.
   set +x
   gpg --yes --quiet --batch --import <(echo "$SIGNING_KEY")
-  fingerprint="$(gpg --list-keys | grep galois -a1 | head -n1 | awk '{$1=$1};1')"
+  fingerprint="$(gpg --list-keys | grep Galois -a1 | head -n1 | awk '{$1=$1};1')"
   echo "$fingerprint:6" | gpg --import-ownertrust
   gpg --yes --no-tty --batch --pinentry-mode loopback --default-key "$fingerprint" --detach-sign -o "$1".sig --passphrase-file <(echo "$SIGNING_PASSPHRASE") "$1"
   set -x