feat: mise g bootstrap (#3792)

jdx · Dec 22, 2024 · f79ce71 · f79ce71
1 parent 0d07383
commit f79ce71
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 4 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -233,7 +233,6 @@ jobs:
           gpg_private_key: ${{ secrets.MISE_GPG_KEY }}
           git_user_signingkey: true
           git_commit_gpgsign: true
-      - run: mkdir -p ~/.minisign && echo "$MINISIGN_KEY" >~/.minisign/minisign.key
       - name: cache zipsign
         id: cache-zipsign
         uses: actions/cache@v4
@@ -269,6 +268,7 @@ jobs:
             mise-v*.tar.xz
             mise-v*.zip
           merge-multiple: true
+      - run: echo "$MINISIGN_KEY" >minisign.key
       - run: ls -R artifacts
       - run: scripts/release.sh
         env:

diff --git a/scripts/release.sh b/scripts/release.sh
@@ -55,23 +55,23 @@ sha256sum ./mise-latest-* >SHASUMS256.txt
 sha512sum ./mise-latest-* >SHASUMS512.txt
 gpg --clearsign -u 8B81C9D17413A06D <SHASUMS256.txt >SHASUMS256.asc
 gpg --clearsign -u 8B81C9D17413A06D <SHASUMS512.txt >SHASUMS512.asc
-minisign -Sm SHASUMS256.txt SHA256SUMS512.txt
+minisign -Ss "$BASE_DIR/minisign.key" -m SHASUMS256.txt SHA256SUMS512.txt
 popd
 
 pushd "$RELEASE_DIR/$MISE_VERSION"
 sha256sum ./* >SHASUMS256.txt
 sha512sum ./* >SHASUMS512.txt
 gpg --clearsign -u 8B81C9D17413A06D <SHASUMS256.txt >SHASUMS256.asc
 gpg --clearsign -u 8B81C9D17413A06D <SHASUMS512.txt >SHASUMS512.asc
-minisign -Sm SHASUMS256.txt SHA256SUMS512.txt
+minisign -Ss "$BASE_DIR/minisign.key" -m SHASUMS256.txt SHA256SUMS512.txt
 popd
 
 echo "::group::install.sh"
 ./scripts/render-install.sh >"$RELEASE_DIR"/install.sh
 chmod +x "$RELEASE_DIR"/install.sh
 shellcheck "$RELEASE_DIR"/install.sh
 gpg -u 8B81C9D17413A06D --output "$RELEASE_DIR"/install.sh.sig --sign "$RELEASE_DIR"/install.sh
-minisign -Sm "$RELEASE_DIR"/install.sh
+minisign -Ss "$BASE_DIR/minisign.key" -m "$RELEASE_DIR"/install.sh
 cp "$RELEASE_DIR"/{install.sh,install.sh.minisig} "$RELEASE_DIR/$MISE_VERSION"
 
 if [[ "$DRY_RUN" != 1 ]]; then