-
Notifications
You must be signed in to change notification settings - Fork 3
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
SignRelease cherrypick #266
Conversation
tests/ci/env_helper.py
Outdated
@@ -11,6 +11,8 @@ | |||
|
|||
CACHES_PATH = os.getenv("CACHES_PATH", TEMP_PATH) | |||
CLOUDFLARE_TOKEN = os.getenv("CLOUDFLARE_TOKEN") | |||
GPG_BINARY_SIGNING_KEY = os.getenv("GPG_BINARY_SIGNING_KEY") |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
doesn't that mean that signing keys are available to every other step too?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Maybe it is better to move that code to sign_release.py ?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The signing keys are in the environment, so they are already available to all steps.
Will move the import.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
23.3 Port of #266 Signing binaries
Adding the signing and sha256 files back to the build process.