build(release): sign checksum file with Minisign

dbohdan · dbohdan · commit 5f886970575c · 2025-09-09T16:51:59.000Z
diff --git a/script/release.go b/script/release.go
@@ -103,6 +103,11 @@ func buildAll() error {
 		}
 	}
 
+	fmt.Println()
+	if err := signFile(filepath.Join(releaseDir, checksumFilename)); err != nil {
+		return fmt.Errorf("signing failed: %v\n", err)
+	}
+
 	return nil
 }
 
@@ -238,3 +243,13 @@ func appendChecksum(checksumFilePath, filePath string) error {
 
 	return nil
 }
+
+func signFile(filePath string) error {
+	fmt.Printf("Signing %s\n", filePath)
+
+	cmd := exec.Command("minisign", "-S", "-m", filePath)
+	cmd.Stdin = os.Stdin
+	cmd.Stdout = os.Stdout
+	cmd.Stderr = os.Stderr
+	return cmd.Run()
+}

Original file line number	Diff line number	Diff line change
`@@ -103,6 +103,11 @@ func buildAll() error {`
`103`	`103`	`}`
`104`	`104`	`}`
`105`	`105`
	`106`	`+ fmt.Println()`
	`107`	`+ if err := signFile(filepath.Join(releaseDir, checksumFilename)); err != nil {`
	`108`	`+ return fmt.Errorf("signing failed: %v\n", err)`
	`109`	`+ }`
	`110`	`+`
`106`	`111`	`return nil`
`107`	`112`	`}`
`108`	`113`
`@@ -238,3 +243,13 @@ func appendChecksum(checksumFilePath, filePath string) error {`
`238`	`243`
`239`	`244`	`return nil`
`240`	`245`	`}`
	`246`	`+`
	`247`	`+func signFile(filePath string) error {`
	`248`	`+ fmt.Printf("Signing %s\n", filePath)`
	`249`	`+`
	`250`	`+ cmd := exec.Command("minisign", "-S", "-m", filePath)`
	`251`	`+ cmd.Stdin = os.Stdin`
	`252`	`+ cmd.Stdout = os.Stdout`
	`253`	`+ cmd.Stderr = os.Stderr`
	`254`	`+ return cmd.Run()`
	`255`	`+}`