Skip to content

Commit 3dd7b6b

Browse files
v1.34.48: fix minisign signing for encrypted key (remove -x, require password) (#307)
1 parent 62e255d commit 3dd7b6b

1 file changed

Lines changed: 5 additions & 1 deletion

File tree

.github/workflows/release.yml

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -479,9 +479,13 @@ jobs:
479479
printf "%s" "$MINISIGN_PRIVATE_KEY_B64" | base64 -d > "$keyfile"
480480
test -s "$keyfile"
481481
482+
# clé minisign chiffrée -> password obligatoire
483+
test -n "${MINISIGN_PASSWORD:-}" || { echo "MINISIGN_PASSWORD missing" >&2; exit 1; }
484+
482485
for f in vix-*.tar.gz vix-*.zip; do
483486
[ -f "$f" ] || continue
484-
printf "%s" "$MINISIGN_PASSWORD" | "$MS" -S -x -s "$keyfile" -m "$f"
487+
# IMPORTANT: pas de -x (c'est le chemin du .minisig), et on envoie un vrai newline
488+
printf '%s\n' "$MINISIGN_PASSWORD" | "$MS" -S -s "$keyfile" -m "$f"
485489
done
486490
487491
rm -f "$keyfile"

0 commit comments

Comments
 (0)