mirror of
https://gitea.com/gitea/runner.git
synced 2026-11-05 23:05:45 +00:00
silverwindandLunny Xiao
7a9fccb842
The release job has imported the Teabot GPG key since https://gitea.com/gitea/runner/pulls/116, but `.goreleaser.yaml` never had a `signs:` block, so releases were never signed. Add it so `checksums.txt` gets a detached `checksums.txt.sig`, the same way https://gitea.com/gitea/cli signs its releases. The nightly job imports the key as well since the `signs:` block applies to nightly builds, and the R2 publisher mirrors the signature to dl.gitea.com. _Written by Claude (Opus 5.5)._ --------- Co-authored-by: Lunny Xiao <[email protected]> Reviewed-on: https://gitea.com/gitea/runner/pulls/1382 Reviewed-by: Lunny Xiao <[email protected]>