Skip to content

Commit c1c6a3b

Browse files
committed
ci(reusable-update-flake-lock): Remove GPG passphrase option
`nix flake update --commit-lock-file` does not have a way to provide a passphrase to GPG.
1 parent a710f3d commit c1c6a3b

File tree

1 file changed

+0
-5
lines changed

1 file changed

+0
-5
lines changed

.github/workflows/reusable-update-flake-lock.yml

Lines changed: 0 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -39,9 +39,6 @@ on:
3939
GIT_GPG_SIGNING_SECRET_KEY:
4040
description: GPG secret key used to sign commits
4141
required: false
42-
GIT_GPG_SIGNING_PASSPHRASE:
43-
description: GPG passphrase for secret key
44-
required: false
4542

4643
outputs:
4744
pr-url:
@@ -82,12 +79,10 @@ jobs:
8279
if: ${{ inputs.sign-commits }}
8380
env:
8481
GIT_GPG_SIGNING_SECRET_KEY: ${{ secrets.GIT_GPG_SIGNING_SECRET_KEY }}
85-
GIT_GPG_SIGNING_PASSPHRASE: ${{ secrets.GIT_GPG_SIGNING_PASSPHRASE }}
8682
run: |
8783
echo "$GIT_GPG_SIGNING_SECRET_KEY" \
8884
| gpg --batch --yes \
8985
--pinentry-mode loopback \
90-
--passphrase "$GIT_GPG_SIGNING_PASSPHRASE" \
9186
--import
9287
git config --local user.signingkey "${{ vars.GIT_GPG_SIGNING_KEY_ID }}"
9388

0 commit comments

Comments
 (0)