cargo-binstall/.github/scripts/ephemeral-gen.sh
Félix Saparelli 5d4333d5c8
Fix release build again (#1400)
* Fix build again

* Recommend (r)age over minisign password

* Dry-run the entire release process

* Reorg a bit so dry-run works

* Fix secret name

* Add check on age key

* Pass secrets down

* Use a cross-platform "date"

* Delete signing key artifact to be extra safe

* Last little bits
2023-09-26 11:17:17 +00:00

13 lines
284 B
Bash
Executable file

#!/usr/bin/env bash
set -euxo pipefail
cargo binstall -y rsign2 rage
rsign generate -f -W -p minisign.pub -s minisign.key
set +x
echo "::add-mask::$(tail -n1 minisign.key)"
set -x
rage --encrypt --recipient "$AGE_KEY_PUBLIC" --output minisign.key.age minisign.key
rm minisign.key