flemming-it 6c4c60004a ci: sign release bundles with FAI_SIGNING_KEY ... Drop-in from fai/platform .forgejo/workflow-templates/ sign-bundle-keypair.yml. Triggers on v*.*.* tag push: builds wasm32-wasip2, fetches the fai CLI from get.fai.flemming.ai, packs the bundle, ECDSA P-256 signs it against the org-level Forgejo secret FAI_SIGNING_KEY, round-trip-verifies against infra/cosign/official.pub on fai/platform main, and attaches bundle + .sig to the Forgejo Release via the API. Signed-off-by: flemming-it <sf@flemming.it>		2026-05-28 23:14:12 +02:00
..
sign.yml	ci: sign release bundles with FAI_SIGNING_KEY	2026-05-28 23:14:12 +02:00