text-extract/.forgejo
flemming-it 6156cd5bd8
Some checks failed
CI / Linux x86_64 (Forgejo) (push) Failing after 2s
ci: sign release bundles with FAI_SIGNING_KEY
Drop-in from fai/platform .forgejo/workflow-templates/
sign-bundle-keypair.yml. Triggers on v*.*.* tag push:
builds wasm32-wasip2, fetches the fai CLI from
get.fai.flemming.ai, packs the bundle, ECDSA P-256 signs
it against the org-level Forgejo secret FAI_SIGNING_KEY,
round-trip-verifies against infra/cosign/official.pub on
fai/platform main, and attaches bundle + .sig to the
Forgejo Release via the API.

Hubs configured with require_signatures: true now accept
this module's releases. Without the secret configured the
workflow fails fast with the setup instructions in stderr.

Signed-off-by: flemming-it <sf@flemming.it>
2026-05-28 23:14:01 +02:00
..
workflows ci: sign release bundles with FAI_SIGNING_KEY 2026-05-28 23:14:01 +02:00