From da4441b24a68861244ed6086cc38a63d589d502b Mon Sep 17 00:00:00 2001 From: m5r Date: Sat, 8 Aug 2026 14:44:07 +0200 Subject: [PATCH] release: pin the artifact-signing subkey fingerprint --- .gitea/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.gitea/workflows/release.yml b/.gitea/workflows/release.yml index 3ec9a79..1597cab 100644 --- a/.gitea/workflows/release.yml +++ b/.gitea/workflows/release.yml @@ -61,7 +61,7 @@ env: # prerequisite 1 creates it; until its fingerprint is pasted in here the # *guard job* fails closed — before the gates, and long before anything is # pushed to the registry. 40 uppercase hex characters, no spaces. - RELEASE_SIGNING_FPR: "REPLACE_WITH_RELEASE_SIGNING_SUBKEY_FINGERPRINT" + RELEASE_SIGNING_FPR: "B281CECC877BD36575543F0A4148C60EC18D831D" jobs: # Steps 1-6 of ruling 7. Everything here is cheap and refuses a bad tag