zuul/zuul-jobs
Code Issues Proposed changes
zuul-jobs/roles/sign-artifacts
History
Jeremy Stanley 7c64b4bdb3 Record artifact checksums and signatures to stdout 
In case of later upload failures, record the SHA2-256 checksum and
ASCII-armored OpenPGP signature of each signed artifact to the job's
output stream so they can later be used for manual uploading.

Change-Id: Ifd136b95357d499e088c5509fa57daf76a246cf4
2020-06-16 14:39:57 +00:00
..
defaults
Add role to GPG sign artifacts in a directory
2017-08-22 19:24:05 -04:00
tasks
Record artifact checksums and signatures to stdout
2020-06-16 14:39:57 +00:00
README.rst
Remove GPG public key for sign-artifacts role
2017-08-25 13:28:02 -04:00

README.rst

Sign artifacts

Role Variables

Complex argument which contains the GPG private key for signing the artifacts. It is expected that this argument comes from a Secret.

The ascii-armored contents of the GPG private key.