Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add option to sign the Helm package #18

Closed
wants to merge 0 commits into from

Conversation

mrsimonemms
Copy link

Allow signing of Helm packages with a GPG key

Fixes #17

To test, take a look at this repo which has two Actions with a signed and unsigned example using GHCR

Feedback welcome.

@mrsimonemms mrsimonemms force-pushed the main branch 2 times, most recently from a452143 to 48ed743 Compare September 4, 2024 20:14
@sergeyshaykhullin
Copy link
Member

sergeyshaykhullin commented Oct 13, 2024

@mrsimonemms Could you please resolve merge conflicts?

It seems like run should be

${{ inputs.sign == 'true' && inputs.signing_passphrase && format('echo ''{0}'' | ', inputs.signing_passphrase) || '' }}helm package '${{ inputs.path == null && format('{0}/{1}', 'charts', inputs.name) || inputs.path }}' --version '${{ inputs.tag }}' ${{ inputs.app_version != null && format('--app-version {0}', inputs.app_version) || '' }} ${{ inputs.sign == 'true' && format('--sign --key ''{0}'' --keyring {1} --passphrase-file -', inputs.signing_key, inputs.signing_keyring) || '' }}

@mrsimonemms
Copy link
Author

@sergeyshaykhullin it's automatically closed the PR when I rebased it - I'll get it updated in the next couple of days

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Allow signing of packages
2 participants