release: pin the artifact-signing subkey fingerprint

2026-08-08 14:44:07 +02:00
parent 004092a7ef
commit da4441b24a
1 changed files with 1 additions and 1 deletions
@@ -61,7 +61,7 @@ env:
  # prerequisite 1 creates it; until its fingerprint is pasted in here the
  # *guard job* fails closed — before the gates, and long before anything is
  # pushed to the registry. 40 uppercase hex characters, no spaces.
-  RELEASE_SIGNING_FPR: "REPLACE_WITH_RELEASE_SIGNING_SUBKEY_FINGERPRINT"
+  RELEASE_SIGNING_FPR: "B281CECC877BD36575543F0A4148C60EC18D831D"

 jobs:
  # Steps 1-6 of ruling 7. Everything here is cheap and refuses a bad tag