From b2b0b71437dc8032ce8e273a486c7ebbd57c06dd Mon Sep 17 00:00:00 2001 From: Lorenzo Susini Date: Tue, 7 Nov 2023 16:48:56 +0000 Subject: [PATCH] update(ci): sign rpm packages with sha256 Signed-off-by: Lorenzo Susini --- .github/workflows/release-draft.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release-draft.yaml b/.github/workflows/release-draft.yaml index e2a9a5caa2..214af82b7f 100644 --- a/.github/workflows/release-draft.yaml +++ b/.github/workflows/release-draft.yaml @@ -213,7 +213,7 @@ jobs: PRIVATE_KEY: ${{ secrets.SYSDIG_REPO_SIGNING_KEY }} run: printenv PRIVATE_KEY | gpg --import - - name: Sign RPMs - run: rpm --define "_gpg_name ${{ env.KEY_ID }}" --addsign *.rpm + run: rpm --define "_gpg_name ${{ env.KEY_ID }}" --define "_binary_filedigest_algorithm 8" --addsign *.rpm - name: Check signature run: test "$(rpm -qpi *.rpm | awk '/Signature/' | grep -i none | wc -l)" -eq 0 - name: Upload Signed RPMs