Skip to content

Secure signing of packages in CI #2 #2

@endersonmaia

Description

@endersonmaia
  1. Create the signing environment with branch/tag restrictions and the SIGNING_KEY secret
  2. Add the signers team with Write access to the repo
  3. Create org-level rulesets (Protect main, Protect release tags)
  4. Initialize the gh-pages branch
  5. Enable GitHub Pages
  6. Create the sensitive files label
  7. Add the build/sign/publish workflow (adapt build steps for the target distro)
  8. Test: push to a branch (build only), push to main (build + sign), push a tag (build + sign + publish)

Reference: cartesi/macports-ports#2

Metadata

Metadata

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions