diff --git a/.github/workflows/sign-deb-example.yaml b/.github/workflows/sign-deb-example.yaml new file mode 100644 index 0000000..83f3f36 --- /dev/null +++ b/.github/workflows/sign-deb-example.yaml @@ -0,0 +1,20 @@ +name: GPG sign DEB +on: workflow_dispatch +jobs: + security: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@master + + - name: setup GPG + uses: ./shared-workflows/devops/setup-gpg + with: + gpg-private-key: ${{ secrets.GPG_SECRET_KEY }} + gpg-public-key: ${{ secrets.GPG_PUBLIC_KEY }} + gpg-key-pass: ${{ secrets.GPG_PASS }} + gpg-key-name: "aerospike-inc" + + - name: GPG sign deb # gpg sign and verify deb packages + run: | + dpkg-sig --sign builder tests/*.deb + dpkg-sig --verify tests/*.deb diff --git a/.github/workflows/sign-file-example.yaml b/.github/workflows/sign-file-example.yaml new file mode 100644 index 0000000..eac031f --- /dev/null +++ b/.github/workflows/sign-file-example.yaml @@ -0,0 +1,23 @@ +name: GPG sign file +on: workflow_dispatch +jobs: + security: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@master + + - name: setup GPG + uses: ./shared-workflows/devops/setup-gpg + with: + gpg-private-key: ${{ secrets.GPG_SECRET_KEY }} + gpg-public-key: ${{ secrets.GPG_PUBLIC_KEY }} + gpg-key-pass: ${{ secrets.GPG_PASS }} + gpg-key-name: "aerospike-inc" + + - name: GPG sign artifacts # Signing other artifacts + env: + GPG_TTY: no-tty + GPG_PASSPHRASE: ${{ secrets.GPG_PASS }} + run: | + gpg --detach-sign --no-tty --batch --yes --output README.md.asc --passphrase "$GPG_PASSPHRASE" README.md + gpg --verify README.md.asc README.md diff --git a/.github/workflows/sign-rpm-example.yaml b/.github/workflows/sign-rpm-example.yaml new file mode 100644 index 0000000..c3f7c16 --- /dev/null +++ b/.github/workflows/sign-rpm-example.yaml @@ -0,0 +1,22 @@ +name: GPG sign RPM +on: workflow_dispatch +jobs: + security: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@master + + - name: setup GPG + uses: ./shared-workflows/devops/setup-gpg + with: + gpg-private-key: ${{ secrets.GPG_SECRET_KEY }} + gpg-public-key: ${{ secrets.GPG_PUBLIC_KEY }} + gpg-key-pass: ${{ secrets.GPG_PASS }} + gpg-key-name: "aerospike-inc" + + - name: Sign and check rpm # gpg sign and verify rpm packages + # your rpm here + run: | + rpm --addsign tests/*.rpm + rpm --checksig tests/*.rpm + diff --git a/tests/test-1.0-2.noarch.rpm b/tests/test-1.0-2.noarch.rpm new file mode 100644 index 0000000..4897ce5 Binary files /dev/null and b/tests/test-1.0-2.noarch.rpm differ diff --git a/tests/test.deb b/tests/test.deb new file mode 100644 index 0000000..a0d5255 Binary files /dev/null and b/tests/test.deb differ