Skip to content

Commit 410e1ac

Browse files
committed
fix(git-node): improve release tag signature verification
Add support for non-RSA keys, and for keys with several identities.
1 parent cb53a80 commit 410e1ac

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

lib/promote_release.js

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -196,7 +196,7 @@ export default class ReleasePromotion extends Session {
196196

197197
async verifyTagSignature(version) {
198198
const { cli } = this;
199-
const verifyTagPattern = /gpg:[^\n]+\ngpg:\s+using RSA key ([^\n]+)\ngpg:\s+issuer "([^"]+)"\ngpg:\s+Good signature from "([^<]+) <\2>"/;
199+
const verifyTagPattern = /gpg:[^\n]+\ngpg:\s+using \w+ key ([^\n]+)\ngpg:\s+issuer "([^"]+)"\ngpg:\s+Good signature from (?:"[^"]+"(?: \[ultimate\])?\ngpg:\s+aka )*"([^<]+) <\2>"/;
200200
const [verifyTagOutput, haystack] = await Promise.all([forceRunAsync(
201201
'git', ['--no-pager',
202202
'verify-tag',

0 commit comments

Comments
 (0)