mirror of
https://github.com/cargo-bins/cargo-binstall.git
synced 2025-04-22 13:38:43 +00:00
ee7fcb3210
* Sign our releases * Use secrets instead of artifacts * And the universal * Apparently we can’t use secrets like that? * Minor fixes to doc * Private key requires untrusted comment * Dogfood one deeper
16 lines
366 B
Bash
Executable file
16 lines
366 B
Bash
Executable file
#!/usr/bin/env bash
|
|
|
|
set -euxo pipefail
|
|
|
|
cargo binstall -y rsign2
|
|
rsign generate -f -W -p minisign.pub -s minisign.key
|
|
|
|
cat >> crates/bin/Cargo.toml <<EOF
|
|
[package.metadata.binstall.signing]
|
|
algorithm = "minisign"
|
|
pubkey = "$(tail -n1 minisign.pub)"
|
|
EOF
|
|
|
|
set +x
|
|
echo "::add-mask::$(tail -n1 minisign.key)"
|
|
echo "private=$(tail -n1 minisign.key)" >> "$GITHUB_OUTPUT"
|