release: pin the artifact-signing subkey fingerprint

This commit is contained in:
2026-08-08 14:44:07 +02:00
parent 004092a7ef
commit 75038b61a6
+1 -1
View File
@@ -61,7 +61,7 @@ env:
# prerequisite 1 creates it; until its fingerprint is pasted in here the # prerequisite 1 creates it; until its fingerprint is pasted in here the
# *guard job* fails closed — before the gates, and long before anything is # *guard job* fails closed — before the gates, and long before anything is
# pushed to the registry. 40 uppercase hex characters, no spaces. # pushed to the registry. 40 uppercase hex characters, no spaces.
RELEASE_SIGNING_FPR: "REPLACE_WITH_RELEASE_SIGNING_SUBKEY_FINGERPRINT" RELEASE_SIGNING_FPR: "B281CECC877BD36575543F0A4148C60EC18D831D"
jobs: jobs:
# Steps 1-6 of ruling 7. Everything here is cheap and refuses a bad tag # Steps 1-6 of ruling 7. Everything here is cheap and refuses a bad tag