You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@logging.apache.org by sw...@apache.org on 2024/11/27 05:09:36 UTC
(logging-log4cxx) branch add_signature_to_packaged_artefacts created (now 7aa8af40)
This is an automated email from the ASF dual-hosted git repository.
swebb2066 pushed a change to branch add_signature_to_packaged_artefacts
in repository https://gitbox.apache.org/repos/asf/logging-log4cxx.git
at 7aa8af40 Add signature file to packaged source
This branch includes the following new commits:
new 7aa8af40 Add signature file to packaged source
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
(logging-log4cxx) 01/01: Add signature file to packaged source
Posted by sw...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
swebb2066 pushed a commit to branch add_signature_to_packaged_artefacts
in repository https://gitbox.apache.org/repos/asf/logging-log4cxx.git
commit 7aa8af4015f03e501299eecfe8ef18d7958258de
Author: Stephen Webb <sw...@gmail.com>
AuthorDate: Wed Nov 27 16:09:14 2024 +1100
Add signature file to packaged source
---
.github/workflows/package_code.yml | 19 ++++++++++++++++---
1 file changed, 16 insertions(+), 3 deletions(-)
diff --git a/.github/workflows/package_code.yml b/.github/workflows/package_code.yml
index aae07227..e4ce5404 100644
--- a/.github/workflows/package_code.yml
+++ b/.github/workflows/package_code.yml
@@ -19,9 +19,9 @@ on:
push:
branches:
- master
-# pull_request:
-# branches:
-# - master
+ pull_request:
+ branches:
+ - master
jobs:
job1:
@@ -37,6 +37,17 @@ jobs:
persist-credentials: false # do not persist auth token in the local git config
path: clean-checkout
+ - name: Setup GPG
+# uses: crazy-max/ghaction-import-gpg@01dd5d3ca463c7f10f7f4f7b4f177225ac661ee4 # 6.1.0
+# with:
+# gpg_private_key: ${{ secrets.LOGGING_GPG_SECRET_KEY }}
+ # Using `setup-java` as temporary workaround, since `crazy-max` is not authorized
+ uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73 # 3.7.0
+ with:
+ distribution: temurin
+ java-version: 17
+ gpg-private-key: ${{ secrets.LOGGING_GPG_SECRET_KEY }}
+
# Consider using CPack when it supports a white-list for included files
# - name: 'Install minimum dependencies'
# run: |
@@ -56,10 +67,12 @@ jobs:
cd ..
sha512sum "apache-log4cxx-$VERSION.tar.gz" > "apache-log4cxx-$VERSION.tar.gz.sha512"
sha256sum "apache-log4cxx-$VERSION.tar.gz" > "apache-log4cxx-$VERSION.tar.gz.sha256"
+ gpg --armor --detach-sign --yes --pinentry-mode error "apache-log4cxx-$VERSION.tar.gz"
tar xf "apache-log4cxx-$VERSION.tar.gz"
zip -rm "apache-log4cxx-$VERSION.zip" apache-log4cxx-$VERSION
sha512sum "apache-log4cxx-$VERSION.zip" > "apache-log4cxx-$VERSION.zip.sha512"
sha256sum "apache-log4cxx-$VERSION.zip" > "apache-log4cxx-$VERSION.zip.sha256"
+ gpg --armor --detach-sign --yes --pinentry-mode error "apache-log4cxx-$VERSION.zip"
- uses: actions/upload-artifact@v4
if: always()