Merge pull request #150 from greenbone/y0urself/fix-signing

Fix the Release Workflow CI

.github/workflows/release-pontos.yml

@@ -42,7 +42,7 @@ jobs:
     - name: Sign assets with pontos
       run: |
         echo "Signing assets for ${{env.VERSION}}"
-        echo -e "${{ env.GPG_PASSPHRASE }}" >> tmp.file
+        echo -e "${{ env.GPG_KEY }}" >> tmp.file
         gpg --import tmp.file && rm tmp.file
         poetry run pontos-release sign \
           --signing-key ${{ env.GPG_FINGERPRINT }} \

CHANGELOG.md

@@ -11,6 +11,7 @@ and this project adheres to [Calendar Versioning](https://calver.org).
 ### Deprecated
 ### Removed
 ### Fixed
+* Do not print passphrase [#150](https://github.com/greenbone/pontos/pull/150)
 
 [Unreleased]: https://github.com/greenbone/pontos/compare/v21.7.0...HEAD
 

pontos/release/release.py

@@ -515,7 +515,10 @@ def main(
             ):
                 return sys.exit(1) if leave else False
         except subprocess.CalledProcessError as e:
-            error(f'Could not run command "{e.cmd}".')
+            if not '--passphrase' in e.cmd:
+                error(f'Could not run command "{e.cmd}".')
+            else:
+                error('Headless signing failed.')
             out(f'Error was: {e.stderr}')
             sys.exit(1)