rootiest/fish-config
1
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(ci): base64-encode the bot GPG key secret #147

Merged
rootiest merged 2 commits from fix/ci-gpg-key-base64 into main 2026-09-10 04:00:26 +00:00
Conversation 0 Commits 2 Files Changed 3
+8 -2
1 changed files with 8 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit 4da176d507 - Show all commits
.github/workflows/ci.yml
+8 -2
View File
@@ -135,15 +135,21 @@ jobs:
# of server config. fishconfig-bot is a dedicated Gitea account # of server config. fishconfig-bot is a dedicated Gitea account
# (verified email, no login) that owns this key; the private # (verified email, no login) that owns this key; the private
# key lives only in the CI_GPG_PRIVATE_KEY repo secret. # key lives only in the CI_GPG_PRIVATE_KEY repo secret.
#
# Secret is base64-encoded: a raw multi-line armored key piped
# through `echo "$VAR" | gpg --import` came out CRC-corrupted
# ("Invalid keyring") the first time this ran -- something in
# the secret/env round-trip mangles embedded newlines. Base64
# collapses it to one line immune to that.
export GNUPGHOME="$(mktemp -d)" export GNUPGHOME="$(mktemp -d)"
chmod 700 "$GNUPGHOME" chmod 700 "$GNUPGHOME"
echo "pinentry-mode loopback" > "$GNUPGHOME/gpg.conf" echo "pinentry-mode loopback" > "$GNUPGHOME/gpg.conf"
echo "allow-loopback-pinentry" > "$GNUPGHOME/gpg-agent.conf" echo "allow-loopback-pinentry" > "$GNUPGHOME/gpg-agent.conf"
command -v gpg >/dev/null || sudo apt-get install -y --no-install-recommends gnupg command -v gpg >/dev/null || sudo apt-get install -y --no-install-recommends gnupg
echo "$BOT_GPG_KEY" | gpg --batch --import echo "$BOT_GPG_KEY" | base64 -d | gpg --batch --import
git config user.name "Gitea Actions Bot" git config user.name "Gitea Actions Bot"
git config user.email "fishconfig-bot@git.rootiest.dev" git config user.email "fishconfig-bot@git.rootiest.dev"
git config user.signingkey 0603CD87750C18FB3604147EFD08763FA41E5534 git config user.signingkey CAA082C2F3467E1F7217AD492075C120312D23F4
git config commit.gpgsign true git config commit.gpgsign true
git add docs/fish-config.md docs/fish-config.1 conf.d/__fish_config_op_registry.fish git add docs/fish-config.md docs/fish-config.1 conf.d/__fish_config_op_registry.fish
git diff --cached --quiet && echo "No changes to commit" && exit 0 git diff --cached --quiet && echo "No changes to commit" && exit 0