ci: trust webp from GCS, drop signature check (#969)

tidbyt · Nov 6, 2023 · 2a476a6 · 2a476a6
1 parent a0e617f
commit 2a476a6
Showing 1 changed file with 0 additions and 7 deletions.
diff --git a/scripts/fetch-deps.sh b/scripts/fetch-deps.sh
@@ -14,21 +14,14 @@ rm -rf "/tmp/${LIBWEBP_VERSION}"
 mkdir -p "/tmp/$LIBWEBP_VERSION"
 pushd "/tmp/$LIBWEBP_VERSION" > /dev/null
 
-# WebP release signing key.
-gpg --receive-keys --keyserver hkps://pgp.mit.edu 6B0E6B70976DE303EDF2F601F9C3D6BDB8232B5D
-
 echo "Fetching WebP Binaries"
 for ARCH in $RELEASE_ARCHS
 do
 	if [[ $ARCH == windows* ]]; then
 		curl -sLO "https://storage.googleapis.com/downloads.webmproject.org/releases/webp/${LIBWEBP_VERSION}-${ARCH}.zip"
-		curl -sLO "https://storage.googleapis.com/downloads.webmproject.org/releases/webp/${LIBWEBP_VERSION}-${ARCH}.zip.asc"
-		gpg --verify "${LIBWEBP_VERSION}-${ARCH}.zip.asc" "${LIBWEBP_VERSION}-${ARCH}.zip" 2>/dev/null
 		unzip -q "${LIBWEBP_VERSION}-${ARCH}.zip" -d "${ARCH}"
 	else
 		curl -sLO "https://storage.googleapis.com/downloads.webmproject.org/releases/webp/${LIBWEBP_VERSION}-${ARCH}.tar.gz"
-		curl -sLO "https://storage.googleapis.com/downloads.webmproject.org/releases/webp/${LIBWEBP_VERSION}-${ARCH}.tar.gz.asc"
-		gpg --verify "${LIBWEBP_VERSION}-${ARCH}.tar.gz.asc" "${LIBWEBP_VERSION}-${ARCH}.tar.gz" 2>/dev/null
 		tar -xf "${LIBWEBP_VERSION}-${ARCH}.tar.gz"
 		mv "${LIBWEBP_VERSION}-${ARCH}" "${ARCH}"
 	fi