add minisign verification for container builds (#10115)

2026-02-04 18:00:15 -05:00 · 2020-07-22 17:09:31 -07:00
parent 456b2ef6eb
commit 73890f31af
7 changed files with 88 additions and 19 deletions
--- a/.goreleaser.yml
+++ b/.goreleaser.yml
@@ -114,11 +114,11 @@ checksum:

 signs:
  -
-    signature: "${artifact}.asc"
+    signature: "${artifact}.minisig"
    cmd: "sh"
    args:
      - '-c'
-      - 'gpg --quiet --detach-sign -a ${artifact}'
+      - 'minisign -s /media/${USER}/minio/minisign.key -qQSm ${artifact} < /media/${USER}/minio/minisign-passphrase'
    artifacts: all

 changelog: