2727 sign-deb-packages :
2828 type : boolean
2929 default : false
30- description : Sign DEB Packages (via debsigs, using SIGNING_GPG_KEY )
30+ description : Sign DEB Packages (via debsigs, using NIGHTLY_SIGNING_GPG_KEY )
3131 sign-macos-packages :
3232 type : boolean
3333 default : false
@@ -167,8 +167,8 @@ jobs:
167167 - name : Setup GnuPG
168168 if : ${{ inputs.sign-deb-packages }}
169169 env :
170- SIGNING_GPG_KEY : ${{ secrets.SIGNING_GPG_KEY }}
171- SIGNING_PASSPHRASE : ${{ secrets.SIGNING_PASSPHRASE }}
170+ SIGNING_GPG_KEY : ${{ secrets.NIGHTLY_SIGNING_GPG_KEY }}
171+ SIGNING_PASSPHRASE : ${{ secrets.NIGHTLY_SIGNING_PASSPHRASE }}
172172 run : |
173173 install -d -m 0700 -o "$(id -u)" -g "$(id -g)" /run/gpg
174174 GNUPGHOME="$(mktemp -d -p /run/gpg)"
@@ -299,8 +299,8 @@ jobs:
299299 - name : Setup GnuPG
300300 if : ${{ inputs.sign-rpm-packages }}
301301 env :
302- SIGNING_GPG_KEY : ${{ secrets.SIGNING_GPG_KEY }}
303- SIGNING_PASSPHRASE : ${{ secrets.SIGNING_PASSPHRASE }}
302+ SIGNING_GPG_KEY : ${{ secrets.NIGHTLY_SIGNING_GPG_KEY }}
303+ SIGNING_PASSPHRASE : ${{ secrets.NIGHTLY_SIGNING_PASSPHRASE }}
304304 run : |
305305 install -d -m 0700 -o "$(id -u)" -g "$(id -g)" /run/gpg
306306 GNUPGHOME="$(mktemp -d -p /run/gpg)"
@@ -317,7 +317,7 @@ jobs:
317317 # Discover the fingerprint of the just-imported signing key so
318318 # Build RPM can pass it to rpmsign without hardcoding a specific
319319 # key id. Lets each repo (saltstack/salt, saltstack/salt-nightlies)
320- # provide its own key material via SIGNING_GPG_KEY and have the
320+ # provide its own key material via NIGHTLY_SIGNING_GPG_KEY and have the
321321 # workflow use whatever's in the resulting keyring.
322322 SIGN_KEY_ID=$(gpg --list-secret-keys --with-colons | awk -F: '$1=="fpr" {print $10; exit}')
323323 echo "SIGN_KEY_ID=${SIGN_KEY_ID}" >> "$GITHUB_ENV"
0 commit comments