diff --git a/.github/workflows/charts-release.yaml b/.github/workflows/charts-release.yaml index 85cc65a2a70..999fb555903 100644 --- a/.github/workflows/charts-release.yaml +++ b/.github/workflows/charts-release.yaml @@ -272,6 +272,21 @@ jobs: git config user.name "TrueCharts-Bot" git config user.email "bot@truecharts.org" + # Optional step if GPG signing is used + - name: Prepare GPG key + run: | + gpg_dir=.cr-gpg + mkdir "$gpg_dir" + keyring="$gpg_dir/secring.gpg" + base64 -d <<< "$GPG_KEYRING_BASE64" > "$keyring" + passphrase_file="$gpg_dir/passphrase" + echo "$GPG_PASSPHRASE" > "$passphrase_file" + echo "CR_PASSPHRASE_FILE=$passphrase_file" >> "$GITHUB_ENV" + echo "CR_KEYRING=$keyring" >> "$GITHUB_ENV" + env: + GPG_KEYRING_BASE64: "${{ secrets.GPG_KEYRING_BASE64 }}" + GPG_PASSPHRASE: "${{ secrets.GPG_PASSPHRASE }}" + - name: Run chart-releaser for dependency apps uses: helm/chart-releaser-action@be16258da8010256c6e82849661221415f031968 # v1.5.0 if: | @@ -279,6 +294,7 @@ jobs: with: charts_dir: charts/dependency charts_repo_url: https://deps.truecharts.org + config: cr.yaml env: CR_TOKEN: "${{ secrets.BOT_TOKEN }}" CR_SKIP_EXISTING: "true"