Add GPG sign

diff --git a/.drone.yml b/.drone.yml
index c034f291c90096d856dbed59f7ab41138a60542b..3be1aa2d7063e400ddfc385d6f20dae4337e68c0 100644 (file)
--- a/.drone.yml
+++ b/.drone.yml
@@ -126,9 +126,21 @@ steps:
       - cd ./build
       - sha256sum "$ARTIFACT" > "$ARTIFACT.sum256"
       - ls -lh
-      - # output the sha256 sum for checking purpose
+      - # output the sha256 sum for checking
       - cat "$ARTIFACT.sum256"
       - sha256sum "$ARTIFACT"
+  - name: Sign artifacts
+    image: plugins/gpgsign
+    settings:
+      key:
+        from_secret: gpg_key
+      passphrase:
+        from_secret: gpg_password
+      files:
+        - build/*
+      exclude:
+        - build/*.sum256
+      detach_sign: true
   - name: Upload artifacts
     image: alpine
     environment:
@@ -218,9 +230,21 @@ steps:
       - cd ./build
       - sha256sum "$ARTIFACT" > "$ARTIFACT.sum256"
       - ls -lh
-      - # output the sha256 sum for checking purpose
+      - # output the sha256 sum for checking
       - cat "$ARTIFACT.sum256"
       - sha256sum "$ARTIFACT"
+  - name: Sign artifacts
+    image: plugins/gpgsign
+    settings:
+      key:
+        from_secret: gpg_key
+      passphrase:
+        from_secret: gpg_password
+      files:
+        - build/*
+      exclude:
+        - build/*.sum256
+      detach_sign: true
   - name: Upload artifacts
     image: alpine
     environment: