diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 1e9f351..7f00eed 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -28,14 +28,15 @@ jobs: gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }} passphrase: ${{ secrets.GPG_KEY_PASSPHRASE }} - - name: Verify GPG Key Import - run: gpg --list-secret-keys - - name: Set up Helm uses: azure/setup-helm@v4 with: version: v3.8.1 + - name: Package and Sign Helm Chart + run: | + helm package ./charts/permify --sign --key "info@permify.co" --keyring ~/.gnupg/pubring.gpg + - name: Add Repositories run: | helm repo add bitnami https://charts.bitnami.com/bitnami @@ -49,3 +50,6 @@ jobs: env: CR_TOKEN: "${{ secrets.GH_TOKEN }}" CR_SKIP_EXISTING: true + + - name: Verify Chart Signing + run: helm verify ./charts/permify.tgz \ No newline at end of file