Merge pull request #14 from cashapp/use-github-action-to-verify-relea…

…se-tag-signature Use the cashapp/check-signature-action
cashapp · Jul 26, 2023 · 346fe33 · 346fe33
2 parents 9f03bbf + 02a672d
commit 346fe33
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 8 deletions.
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -23,13 +23,13 @@ jobs:
           java-version: 17
       - name: Setup gradle
         uses: gradle/gradle-build-action@v2
-      - name: Verify release tag
-        run: |
-          set -euxo pipefail
-          cd ${{ github.workspace }}
-          git config gpg.ssh.allowedSignersFile ./config/allowed_release_signers
-          git fetch --tags -f
-          git tag -v ${{ github.ref_name }}
+      - name: "Verify release tag"
+        uses: cashapp/check-signature-action@v0.2.0
+        id: check-tag-sig
+        env:
+          GH_TOKEN: ${{ github.token }}
+        with:
+          allowed-release-signers: yoavamit
       - name: Build library
         uses: gradle/gradle-build-action@v2
         with:

diff --git a/config/allowed_release_signers b/config/allowed_release_signers