add signing test

.gitea/workflows/signing.yaml

@@ -0,0 +1,34 @@
+name: Sign test
+
+on:
+  workflow_dispatch:
+
+env:
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+      - name: List all files
+        run: ls -la
+      - name: Sign
+        id: sign
+        uses: https://git.lerch.org/lobo/action-hsm-sign@v1
+        with:
+          pin: ${{ secrets.HSM_USER_PIN }}
+          files: ???
+          public_key: 'https://emil.lerch.org/serverpublic.pem'
+      - run: |
+          echo "Source 0 should be ./bar: ${{ steps.sign.outputs.SOURCE_0 }}"
+      - run: |
+          echo "Signature 0 should be ./bar.sig: ${{ steps.sign.outputs.SIG_0 }}"
+      - run: echo "URL of bar (0) is ${{ steps.sign.outputs.URL_0 }}"
+      - run: |
+          echo "Source 1 should be ./foo: ${{ steps.sign.outputs.SOURCE_1 }}"
+      - run: |
+          echo "Signature 1 should be ./foo.sig: ${{ steps.sign.outputs.SIG_1 }}"
+      - name: Show signing output
+        run: echo "URL of foo (1) is ${{ steps.sign.outputs.URL_1 }}"
+      - name: list workspace after run
+        if: always()
+        run: ls -la ${{ github.workspace }}