diff --git a/.gitea/workflows/hello_world.yaml b/.gitea/workflows/hello_world.yaml index 1e19a56..d8daa1a 100644 --- a/.gitea/workflows/hello_world.yaml +++ b/.gitea/workflows/hello_world.yaml @@ -4,8 +4,6 @@ on: [push] jobs: Explore-GitHub-Actions: runs-on: ubuntu-latest - env: - PIN: ${{ secrets.HSM_USER_PIN }} steps: - run: echo "🎉 The job was automatically triggered by a ${{ github.event_name }} event." - run: echo "🐧 This job is now running on a ${{ runner.os }} server hosted by GitHub!" @@ -21,6 +19,11 @@ jobs: - run: echo docker run --rm -it -v /run/pcscd/pcscd.comm:/run/pcscd/pcscd.comm:ro -v "${{ github.workspace }}":/home/user git.lerch.org/lobo/pkcs11:1 -s --id 3 -m SHA256-RSA-PKCS -i foo -o foo.sig --pin env:PIN - run: echo "🍏 This job's status is ${{ job.status }}." - run: true + - name: Sign + uses: https://git.lerch.org/lobo/action-hsm-sign@d6ca833927ebc8efc0ed36b9c64aeab00c4e7f32 + with: + pin: ${{ secrets.HSM_USER_PIN }} + files: .gitea/** - name: Notify uses: https://git.lerch.org/lobo/action-notify-ntfy@v1 if: always() @@ -29,32 +32,3 @@ jobs: topic: ${{ secrets.NTFY_TOPIC }} user: ${{ secrets.NTFY_USER }} password: ${{ secrets.NTFY_PASSWORD }} - - # Sign-Something: - # runs-on: ubuntu-latest - # needs: Explore-GitHub-Actions - # container: - # image: git.lerch.org/lobo/pkcs11:1 - # env: - # PIN: ${{ secrets.HSM_USER_PIN }} - # volumes: - # /run/pcscd/pcscd.comm:/run/pcscd/pcscd.comm - # steps: - # - run: -s --id 3 -m SHA256-RSA-PKCS --pin env:PIN -i foo -o foo.sig - # - name: Success Notification - # if: success() - # run: | - # curl -u '${{ secrets.NTFY_USER }}:${{ secrets.NTFY_PASSWORD }}' \ - # -H 'Title: Job Succeeded. ${{ github.repository }}/${{ github.ref }}' \ - # -H "Tags: +1" \ - # -d 'Job succeeded. See '$GITHUB_SERVER_URL'/${{ github.repository }}/actions/runs/${{ github.run_number }} for details' \ - # '${{ secrets.NTFY_HOST }}${{ secrets.NTFY_TOPIC }}' - # - name: Failure Notification - # if: failure() - # run: | - # curl -u '${{ secrets.NTFY_USER }}:${{ secrets.NTFY_PASSWORD }}' \ - # -H "Priority: high" \ - # -H 'Title: Job FAILED. ${{ github.repository }}/${{ github.ref }}' \ - # -H "Tags: warning" \ - # -d 'Job failed. See '$GITHUB_SERVER_URL'/${{ github.repository }}/actions/runs/${{ github.run_number }} for details' \ - # '${{ secrets.NTFY_HOST }}${{ secrets.NTFY_TOPIC }}' \ No newline at end of file