This is an automated email from the ASF dual-hosted git repository. swebb2066 pushed a commit to branch harden_code_packaging_action in repository https://gitbox.apache.org/repos/asf/logging-log4cxx.git
commit 8dc0673e8c76a3c0d789d26b88041f3691ed7d21 Author: Stephen Webb <[email protected]> AuthorDate: Fri Aug 14 15:48:49 2026 +1000 Improve the release-signing workflow --- .github/workflows/package_code.yml | 13 ++++++++++--- 1 file changed, 10 insertions(+), 3 deletions(-) diff --git a/.github/workflows/package_code.yml b/.github/workflows/package_code.yml index 73718e56..89acdd53 100644 --- a/.github/workflows/package_code.yml +++ b/.github/workflows/package_code.yml @@ -19,9 +19,9 @@ on: push: branches: - master -# pull_request: -# branches: -# - master + pull_request: + branches: + - master permissions: read-all @@ -70,6 +70,13 @@ jobs: sha256sum "apache-log4cxx-$VERSION.zip" > "apache-log4cxx-$VERSION.zip.sha256" gpg --armor --detach-sign --yes --pinentry-mode error "apache-log4cxx-$VERSION.zip" + - name: 'Clean up GPG keyring' + if: always() + run: | + # Wipe private/public key material + gpg --batch --yes --delete-secret-keys "LOGGING_GPG_KEY_ID" || true + gpg --batch --yes --delete-keys "LOGGING_GPG_KEY_ID" || true + - uses: actions/upload-artifact@v4 if: always() with:
