feat: verify tag signature on release

smartcontractkit · Jan 23, 2025 · 2465275 · 2465275
1 parent f9c3869
commit 2465275
Showing 1 changed file with 12 additions and 6 deletions.
diff --git a/.github/workflows/build-publish.yml b/.github/workflows/build-publish.yml
@@ -60,6 +60,12 @@ jobs:
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
 
+      - name: Check Tag Signature
+        uses: smartcontractkit/.github/actions/check-if-verified@feat/check-if-verified # todo
+        with:
+          tag: ${{ github.ref_name }}
+          assert: true
+
   build-sign-publish-chainlink:
     needs: [checks]
     runs-on: ubuntu-20.04
@@ -128,18 +134,18 @@ jobs:
               ) || ''
             }}
           docker-image-name: >-
-            ${{ 
-              github.ref_type == 'tag' && 
+            ${{
+              github.ref_type == 'tag' &&
               format(
-                '{0}/{1}:{2}', 
-                env.ECR_HOSTNAME, 
+                '{0}/{1}:{2}',
+                env.ECR_HOSTNAME,
                 needs.checks.outputs.ecr-image-name,
                 needs.build-sign-publish-chainlink.outputs.docker-image-tag
               ) || ''
             }}
           docker-image-digest: >-
-            ${{ 
-              github.ref_type == 'tag' && 
+            ${{
+              github.ref_type == 'tag' &&
               needs.build-sign-publish-chainlink.outputs.docker-image-digest || ''
             }}
   crib: