Update release-candidate.yml

fatihtokus · Jul 20, 2024 · 23781e1 · 23781e1
1 parent b8a586e
commit 23781e1
Showing 1 changed file with 10 additions and 9 deletions.
diff --git a/.github/workflows/release-candidate.yml b/.github/workflows/release-candidate.yml
@@ -5,7 +5,7 @@ on:
     tags:
       - "rc*"
 
-permissions:  # added using https://github.com/step-security/secure-workflows
+permissions:
   contents: read
 
 jobs:
@@ -54,15 +54,22 @@ jobs:
       - name: Install GPG
         run: sudo apt-get install -y gnupg
 
+      - name: Configure GPG
+        run: |
+          mkdir -p ~/.gnupg
+          chmod 700 ~/.gnupg
+          echo "use-agent" > ~/.gnupg/gpg.conf
+          echo "pinentry-mode loopback" >> ~/.gnupg/gpg.conf
+
       - name: Import GPG key
         run: |
-            echo "${{ secrets.GPG_PRIVATE_KEY }}" | gpg --batch --yes --import
+          echo "${{ secrets.GPG_PRIVATE_KEY }}" | gpg --batch --yes --import
         env:
           GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
 
       - name: Sign the release file
         run: |
-            echo "${{ secrets.GPG_PASSPHRASE }}" | gpg --batch --yes --passphrase-fd 0 --armor --detach-sign scan2html.tar.gz
+          gpg --batch --yes --pinentry-mode loopback --passphrase "${{ secrets.GPG_PASSPHRASE }}" --armor --detach-sign scan2html.tar.gz
         env:
           GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
 
@@ -72,9 +79,3 @@ jobs:
           files: |
             scan2html.tar.gz
             scan2html.tar.gz.asc
-      - name: Release
-        uses: softprops/action-gh-release@v1
-        with:
-          files: |
-            scan2html.tar.gz
-            scan2html.tar.gz.asc