Provide explicit key id

martin-helmich · Feb 26, 2024 · 260f2ac · 260f2ac
1 parent 5d68342
commit 260f2ac
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/.build/package.sh b/.build/package.sh
@@ -30,5 +30,6 @@ chmod +x phar-composer-${phar_composer_version}.phar
 if [ -n "${signing_key}" ] ; then
   echo "${signing_key}" | gpg --import
 
-  gpg --detach-sign --output "${phar_name}.asc" "${phar_name}"
+  gpg --list-keys
+  gpg --detach-sign -u "${signing_key_fingerprint}" --output "${phar_name}.asc" "${phar_name}"
 fi
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -22,6 +22,7 @@ jobs:
         run: composer run-script package ${{ steps.tagName.outputs.tag }}
         env:
           signing_key: ${{ secrets.pharSigningKey }}
+          signing_key_fingerprint: ${{ secrets.PHAR_SIGNING_KEY_FINGERPRINT }}
 
       - name: Release
         uses: softprops/action-gh-release@v1