Merge pull request #519 from fortify/feat-checksum

chore: Add sha256 and rsa_sha256 release assets
fortify · Mar 25, 2024 · 929b6b9 · 929b6b9
2 parents 6c16b38 + 5be83e8
commit 929b6b9
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -236,6 +236,17 @@ jobs:
         with:
           path: ./artifacts
           merge-multiple: true
+      - run: |
+          cd ./artifacts/release-assets
+          for f in *; do 
+            sha256sum ${f} > ${f}.sha256
+          done
+          for f in *; do 
+            openssl dgst -sha256 -passin env:SIGN_PASSPHRASE -sign <(echo "${SIGN_KEY}") -out ${f}.rsa_sha256 ${f}
+          done
+        env:
+          SIGN_PASSPHRASE: ${{ secrets.SIGN_PASSPHRASE }}
+          SIGN_KEY: ${{ secrets.SIGN_KEY }}
       - uses: actions/upload-artifact@v4
         with:
           path: ./artifacts