chore: enhance GoReleaser and GitHub Actions workflows for GPG signing

- Added GPG signing configuration in .goreleaser.yml to support artifact signing for all artifacts.
- Updated release.yml to enforce GPG signing by setting global Git configuration options for signing commits and tags.
- Improved the signing process by utilizing the GPG fingerprint from environment variables, enhancing security and flexibility.
This commit is contained in:
煎饼果子卷鲨鱼辣椒
2024-12-30 18:35:17 +08:00
parent d7fa7a1442
commit 32a30afaeb
2 changed files with 16 additions and 9 deletions

View File

@@ -43,6 +43,10 @@ jobs:
with:
gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
passphrase: ${{ secrets.PASSPHRASE }}
git_config_global: true
git_user_signingkey: true
git_commit_gpgsign: true
git_tag_gpgsign: true
- name: Run GoReleaser
uses: goreleaser/goreleaser-action@v4