Update .github/workflows/update-repo.yml

This commit is contained in:
2026-04-14 22:02:45 +02:00
parent 4daa997bd8
commit b8f9e33b21

View File

@@ -16,8 +16,6 @@ jobs:
- name: Import GPG Key - name: Import GPG Key
run: | run: |
# Kill any existing agent to prevent config caching
gpgconf --kill gpg-agent || true
echo "${{ secrets.GPG_PRIVATE_KEY }}" | gpg --batch --import --yes echo "${{ secrets.GPG_PRIVATE_KEY }}" | gpg --batch --import --yes
- name: Build and Sign Repository - name: Build and Sign Repository
@@ -27,20 +25,22 @@ jobs:
gpg --export --armor 236328A7F2C2001E > pubkey.gpg gpg --export --armor 236328A7F2C2001E > pubkey.gpg
# FORCE BINARY: Using --output and removing armor explicitly # Sign packages (Binary)
for pkg in *.pkg.tar.zst; do for pkg in *.pkg.tar.zst; do
echo "${{ secrets.GPG_PASSPHRASE }}" | gpg --batch --yes --pinentry-mode loopback \ echo "${{ secrets.GPG_PASSPHRASE }}" | gpg --batch --yes --pinentry-mode loopback \
--local-user 236328A7F2C2001E --passphrase-fd 0 \ --local-user 236328A7F2C2001E --passphrase-fd 0 \
--no-armor --detach-sign --output "$pkg.sig" "$pkg" --detach-sign "$pkg"
done done
# Build DB via Python
python3 ~/build_db.py python3 ~/build_db.py
# FORCE BINARY for DB # Sign the DB file (Binary)
echo "${{ secrets.GPG_PASSPHRASE }}" | gpg --batch --yes --pinentry-mode loopback \ echo "${{ secrets.GPG_PASSPHRASE }}" | gpg --batch --yes --pinentry-mode loopback \
--local-user 236328A7F2C2001E --passphrase-fd 0 \ --local-user 236328A7F2C2001E --passphrase-fd 0 \
--no-armor --detach-sign --output hyprarch-repo.db.sig hyprarch-repo.db --detach-sign hyprarch-repo.db
# Mirror sig for the .tar.gz version
cp hyprarch-repo.db.sig hyprarch-repo.db.tar.gz.sig cp hyprarch-repo.db.sig hyprarch-repo.db.tar.gz.sig
- name: Generate Subfolder Index - name: Generate Subfolder Index