Skip to content

Commit 27ec65c

Browse files
committed
fix: use repo secrets directly for GPG signing instead of Bitwarden
Bitwarden machine account cannot access secrets under new org. GPG_PRIVATE_KEY and GPG_PASSPHRASE already exist as repo secrets.
1 parent ea134bd commit 27ec65c

File tree

1 file changed

+2
-10
lines changed

1 file changed

+2
-10
lines changed

.github/workflows/release.yml

Lines changed: 2 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -26,20 +26,12 @@ jobs:
2626
- name: Run tests
2727
run: go test -v -race ./...
2828

29-
- name: Get secrets from Bitwarden
30-
uses: bitwarden/sm-action@v2
31-
with:
32-
access_token: ${{ secrets.BW_ACCESS_TOKEN }}
33-
secrets: |
34-
af4d9a7c-043d-488a-90a6-b405003aa070 > GPG_PRIVATE_KEY
35-
1c5f902e-31e6-4057-9de8-b4050055e133 > GPG_PASSPHRASE
36-
3729
- name: Import GPG key
3830
uses: crazy-max/ghaction-import-gpg@e89d40939c28e39f97cf32126055eeae86ba74ec # v6
3931
id: import_gpg
4032
with:
41-
gpg_private_key: ${{ env.GPG_PRIVATE_KEY }}
42-
passphrase: ${{ env.GPG_PASSPHRASE }}
33+
gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
34+
passphrase: ${{ secrets.GPG_PASSPHRASE }}
4335

4436
- name: Verify GPG key imported
4537
run: |

0 commit comments

Comments
 (0)