git tag -a -m "Prepare release" v17
git push --follow-tags
gpg --list-secret-keys --keyid-format=long
gpg --full-generate-key
gpg --delete-secret-key EB2A1CE10DE3E599**
Recommended
git config --global user.signingkey CD0C7DB15E9DD359**
OR
gpg -s --default-key CD0C7DB15E9DD359** input > output
gpg -d < input.gpg | head -1
OR
gpg -s --default-key CD0C7DB15E9DD35**
https://github.com/settings/keys
gpg --armor --export CD0C7DB15E9DD35**
gpg --list-secret-keys
# macOS
gpg --armor --export-secret-key joe@foo.bar | pbcopy
# Ubuntu (assuming GNU base64)
gpg --armor --export-secret-key joe@foo.bar -w0 | xclip
# Arch
gpg --armor --export-secret-key joe@foo.bar | xclip -selection clipboard -i
# FreeBSD (assuming BSD base64)
gpg --armor --export-secret-key joe@foo.bar | xclip
Setting GPG as secret repository
- name: Import GPG key
id: import_gpg
uses: crazy-max/ghaction-import-gpg@v5
with:
gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY_ROBOT }}
git_user_signingkey: true
git_commit_gpgsign: true
error: gpg failed to sign the data
fatal: failed to write commit object
export GPG_TTY=$(tty)