sign_workflow.yml

name: sign_workflow

# execute this workflow automatically when a release is first created by our
# 'build' workflow
on:
  repository_dispatch:
    types: [sign_release]

jobs:

  sign_job:
    runs-on: ubuntu-latest
    container: debian:buster-slim

    steps:

    - name: Prereqs
      env:
        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
      run: |
        set -x

        apt-get update
        apt-get install -y git
        git clone "https://token:${GITHUB_TOKEN}@github.com/${GITHUB_REPOSITORY}.git"
      shell: bash

    - name: Execute script to sign release
      env:
        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        BUSKILL_PRERELEASE_PGP_KEY: ${{ secrets.BUSKILL_PRERELEASE_PGP_KEY }}
        RELEASE_ID: ${{ github.event.client_payload.release_id }}
      run: |
        set -x

        ls -lah
        pushd "buskill-app"
        ls -lah
        build/signRelease.sh

      shell: bash