DEVOPS-271: Feat/gpg tests and examples (#6)

* add gpg, rpm and deb examples

* added test files

.github/workflows/sign-deb-example.yaml

@@ -0,0 +1,20 @@
+name: GPG sign DEB
+on: workflow_dispatch
+jobs:
+  security:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@master
+
+      - name: setup GPG
+        uses: ./shared-workflows/devops/setup-gpg
+        with:
+          gpg-private-key: ${{ secrets.GPG_SECRET_KEY }}
+          gpg-public-key: ${{ secrets.GPG_PUBLIC_KEY }}
+          gpg-key-pass: ${{ secrets.GPG_PASS }}
+          gpg-key-name: "aerospike-inc"
+
+      - name: GPG sign deb # gpg sign and verify deb packages
+        run: |
+          dpkg-sig --sign builder tests/*.deb
+          dpkg-sig --verify tests/*.deb

.github/workflows/sign-file-example.yaml

@@ -0,0 +1,23 @@
+name: GPG sign file
+on: workflow_dispatch
+jobs:
+  security:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@master
+
+      - name: setup GPG
+        uses: ./shared-workflows/devops/setup-gpg
+        with:
+          gpg-private-key: ${{ secrets.GPG_SECRET_KEY }}
+          gpg-public-key: ${{ secrets.GPG_PUBLIC_KEY }}
+          gpg-key-pass: ${{ secrets.GPG_PASS }}
+          gpg-key-name: "aerospike-inc"
+
+      - name: GPG sign artifacts  # Signing other artifacts
+        env:
+          GPG_TTY: no-tty
+          GPG_PASSPHRASE: ${{ secrets.GPG_PASS }}
+        run: |
+          gpg --detach-sign --no-tty --batch --yes --output README.md.asc --passphrase "$GPG_PASSPHRASE" README.md
+          gpg --verify README.md.asc README.md

.github/workflows/sign-rpm-example.yaml

@@ -0,0 +1,22 @@
+name: GPG sign RPM
+on: workflow_dispatch
+jobs:
+  security:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@master
+
+      - name: setup GPG
+        uses: ./shared-workflows/devops/setup-gpg
+        with:
+          gpg-private-key: ${{ secrets.GPG_SECRET_KEY }}
+          gpg-public-key: ${{ secrets.GPG_PUBLIC_KEY }}
+          gpg-key-pass: ${{ secrets.GPG_PASS }}
+          gpg-key-name: "aerospike-inc"
+
+      - name: Sign and check rpm # gpg sign and verify rpm packages 
+        # your rpm here
+        run: |
+          rpm --addsign tests/*.rpm
+          rpm --checksig tests/*.rpm
+