From c8d574c648451e515ff87daf61a024759563b4fa Mon Sep 17 00:00:00 2001 From: Jonathan Ruckwood Date: Mon, 18 Jul 2022 16:44:52 +0100 Subject: [PATCH] Replace import-pgp action with upstream version (#68) Hashicorp's ghaction-import-gpg has been deprecated in favour of this action - additionally their action has a bug which they are not intending on fixing and recommend people switch. Reference: https://github.com/hashicorp/terraform-provider-scaffolding/pull/127 Reference: https://github.com/hashicorp/ghaction-import-gpg/issues/11 --- .github/workflows/release.yml | 12 ++++-------- 1 file changed, 4 insertions(+), 8 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 4a00d26f..77944a0c 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -25,16 +25,12 @@ jobs: with: go-version-file: 'go.mod' cache: true - # This uses an action (hashicorp/ghaction-import-gpg) that assumes you set your - # private key in the `GPG_PRIVATE_KEY` secret and passphrase in the `PASSPHRASE` - # secret. If you would rather own your own GPG handling, please fork this action - # or use an alternative one for key handling. - name: Import GPG key id: import_gpg - uses: hashicorp/ghaction-import-gpg@v2.1.0 - env: - GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }} - PASSPHRASE: ${{ secrets.PASSPHRASE }} + uses: crazy-max/ghaction-import-gpg@34ea557550c84ea665cae5c61c3b084feac7e042 # => v5 + with: + gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }} + passphrase: ${{ secrets.PASSPHRASE }} - name: Run GoReleaser uses: goreleaser/goreleaser-action@v3 with: