diff --git a/.github/workflows/update-repo.yml b/.github/workflows/update-repo.yml index 0a153f0..4e74ebc 100644 --- a/.github/workflows/update-repo.yml +++ b/.github/workflows/update-repo.yml @@ -16,8 +16,6 @@ jobs: - name: Import GPG Key run: | - # Kill any existing agent to prevent config caching - gpgconf --kill gpg-agent || true echo "${{ secrets.GPG_PRIVATE_KEY }}" | gpg --batch --import --yes - name: Build and Sign Repository @@ -27,20 +25,22 @@ jobs: gpg --export --armor 236328A7F2C2001E > pubkey.gpg - # FORCE BINARY: Using --output and removing armor explicitly + # Sign packages (Binary) for pkg in *.pkg.tar.zst; do echo "${{ secrets.GPG_PASSPHRASE }}" | gpg --batch --yes --pinentry-mode loopback \ --local-user 236328A7F2C2001E --passphrase-fd 0 \ - --no-armor --detach-sign --output "$pkg.sig" "$pkg" + --detach-sign "$pkg" done + # Build DB via Python python3 ~/build_db.py - # FORCE BINARY for DB + # Sign the DB file (Binary) echo "${{ secrets.GPG_PASSPHRASE }}" | gpg --batch --yes --pinentry-mode loopback \ --local-user 236328A7F2C2001E --passphrase-fd 0 \ - --no-armor --detach-sign --output hyprarch-repo.db.sig hyprarch-repo.db + --detach-sign hyprarch-repo.db + # Mirror sig for the .tar.gz version cp hyprarch-repo.db.sig hyprarch-repo.db.tar.gz.sig - name: Generate Subfolder Index