update signing to the new, more robust version
Some checks failed
Build / build (push) Successful in 1m15s
Build / deploy (push) Successful in 2m5s
Build / sign (push) Has been cancelled

This commit is contained in:
Emil Lerch 2025-07-11 08:36:22 -07:00
parent 5491b45b36
commit 7520a46f5a
Signed by: lobo
GPG key ID: A7B62D657EF764F8

View file

@ -13,10 +13,11 @@ jobs:
- run: echo "Triggered by ${{ github.event_name }} event" - run: echo "Triggered by ${{ github.event_name }} event"
- name: Check out repository code - name: Check out repository code
uses: actions/checkout@v3 uses: actions/checkout@v3
- uses: elerch/setup-zig@v3 - name: Setup Zig
uses: https://github.com/mlugg/setup-zig@v2.0.4
with: with:
version: 0.13.0 version: 0.13.0
- uses: elerch/zig-action-cache@v1.1.6 - uses: https://github.com/Hanaasagi/zig-action-cache@3954aae427f8b05914e08dfd79f15e1f2e435929
- name: Test - name: Test
run: zig build test -Dtarget="$BUILD_TARGET" run: zig build test -Dtarget="$BUILD_TARGET"
- name: Build - name: Build
@ -35,7 +36,7 @@ jobs:
user: ${{ secrets.NTFY_USER }} user: ${{ secrets.NTFY_USER }}
password: ${{ secrets.NTFY_PASSWORD }} password: ${{ secrets.NTFY_PASSWORD }}
sign: sign:
runs-on: ubuntu-latest runs-on: ubuntu-latest-hsm
needs: build needs: build
steps: steps:
- name: Download Artifact - name: Download Artifact
@ -46,11 +47,12 @@ jobs:
run: "chmod 755 flexilib" run: "chmod 755 flexilib"
- name: Sign - name: Sign
id: sign id: sign
uses: https://git.lerch.org/lobo/action-hsm-sign@v1 uses: https://git.lerch.org/lobo/action-hsm-sign@v2
with: with:
pin: ${{ secrets.HSM_USER_PIN }} pin: ${{ secrets.HSM_USER_PIN }}
files: flexilib files: flexilib
public_key: 'https://emil.lerch.org/serverpublic.pem' public_key: 'https://emil.lerch.org/serverpublic.pem'
uhub_control: 'true'
- name: Output signature URL - name: Output signature URL
run: echo "Signature URL is ${{ steps.sign.outputs.URL_0 }}" run: echo "Signature URL is ${{ steps.sign.outputs.URL_0 }}"
- name: Upload Artifact - name: Upload Artifact