Skip to content

Commit

Permalink
Fix: Skip verification of signature
Browse files Browse the repository at this point in the history
  • Loading branch information
localheinz committed Aug 30, 2020
1 parent d4c774c commit aca3c0e
Showing 1 changed file with 0 additions and 6 deletions.
6 changes: 0 additions & 6 deletions .github/workflows/release.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -89,12 +89,6 @@ jobs:
- name: "Sign composer-normalize.phar with gpg"
run: "gpg --armor --local-user \"${{ secrets.GPG_LOCAL_USER }}\" --output ${{ env.COMPOSER_NORMALIZE_PHAR_SIGNATURE }} --passphrase \"${{ secrets.GPG_KEY_PASSPHRASE }}\" --pinentry-mode loopback --yes --detach-sig ${{ env.COMPOSER_NORMALIZE_PHAR }}"

- name: "Receive key with gpg"
run: "gpg --keyserver hkps://keys.openpgp.org --receive-key \"${{ secrets.GPG_LOCAL_USER }}\""

- name: "Verify signature of composer-normalize.phar with gpg"
run: "gpg --verify ${{ env.COMPOSER_NORMALIZE_PHAR_SIGNATURE }} ${{ env.COMPOSER_NORMALIZE_PHAR }}"

- name: "Remove decrypted keys.asc"
run: "rm ${{ env.GPG_KEYS }}"

Expand Down

0 comments on commit aca3c0e

Please sign in to comment.