Skip to content

feat: publish detached signatures to GCS bucket releases.coder.com retroactively #18848

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
wants to merge 11 commits into from
Closed

feat: publish detached signatures to GCS bucket releases.coder.com retroactively #18848

Changes from 1 commit
Commits
Show all changes
11 commits
Select commit Hold shift + click to select a range
e80259c
feat: sign coder binaries with the release key using GPG
jdomeracki-coder Jul 7, 2025
ddd2ada
chore: add comments and invoke the sign_with_gpg.sh script from publi…
jdomeracki-coder Jul 8, 2025
55c67d6
fix: set CODER_GPG_RELEASE_KEY_BASE64 in build & releaes steps
jdomeracki-coder Jul 8, 2025
6241bac
fix: use error instead of echo
jdomeracki-coder Jul 8, 2025
d47b7d3
fix: remove redirect to stderr
jdomeracki-coder Jul 8, 2025
b85a925
feat: publish detached signatures to GCS bucket releases.coder.com
jdomeracki-coder Jul 14, 2025
9af26fc
feat: publish detached signatures to GCS bucket releases.coder.com re…
jdomeracki-coder Jul 14, 2025
0834a62
feat: test with version 2.22.0
jdomeracki-coder Jul 14, 2025
489f267
fix: checkout
jdomeracki-coder Jul 14, 2025
f2ae42e
feat: sign all releases in scope
jdomeracki-coder Jul 14, 2025
f5a5a20
feat: re-run the job for version 2.24.0
jdomeracki-coder Jul 14, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
fix: checkout
  • Loading branch information
@jdomeracki-coder
jdomeracki-coder committed Jul 14, 2025
commit 489f2672952df9e3ee4c0fb26cdfaf6967d0fc6c
15 changes: 14 additions & 1 deletion .github/workflows/release.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -47,7 +47,20 @@ jobs:
# Required for GitHub Actions attestation
attestations: write

steps:
steps:
- name: Checkout
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
fetch-depth: 0

# If the event that triggered the build was an annotated tag (which our
# tags are supposed to be), actions/checkout has a bug where the tag in
# question is only a lightweight tag and not a full annotated tag. This
# command seems to fix it.
# https://github.com/actions/checkout/issues/290
- name: Fetch git tags
run: git fetch --tags --force

- name: Authenticate to Google Cloud
id: gcloud_auth
uses: google-github-actions/auth@ba79af03959ebeac9769e648f473a284504d9193 # v2.1.10
Expand Down
Loading