NUWCDIVNPT / stigman-watcher

A utility that watches a path for test result files on behalf of a STIG Manager Collection
Other
6 stars 4 forks source link

CI/CD: Workflow to build and sign binary artifacts #100

Closed Matte22 closed 6 months ago

Matte22 commented 6 months ago

Continuation of: #96 Continuation of: #95 Resolves: #94

Introduces a new GitHub workflow that builds binaries using the watcher build script then signs them. The signed binaries along with their corresponding .asc signature files are automatically uploaded to GitHub. It also adds the project's public key to the repository for users to verify the signed files. This latest iteration of the PR adds better error handling, removal of third-party GitHub actions and ability to upload unsigned artifacts even if there are failures.