chore(index): repin to the signing key held in this repo's secret

The previous key was pasted into unom/punktfunk's secret store rather than this one. Gitea secrets don't cross repos and can't be read back, so that key was unusable here and is abandoned; INDEX_SIGNING_KEY on THIS repo now holds the private half of the key pinned below. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-20 23:05:39 +02:00
parent 575ea1a371
commit 05e772fedd
3 changed files with 3 additions and 3 deletions
@@ -70,7 +70,7 @@ jobs:
      # auditor would use. Catches a key/host mismatch BEFORE it ships, rather
      # than as every host in the field silently rejecting the catalog.
      - name: Verify signature
-        run: bun run verify -- --pub "${{ vars.INDEX_PUBLIC_KEY || 'ed25519:qK18TE2qygIyObtMlHxUI/G1gKby8tPxuieAfnEKgYE=' }}"
+        run: bun run verify -- --pub "${{ vars.INDEX_PUBLIC_KEY || 'ed25519:V7KKMg8sq2A2TW7D/GFWaM0ruAvigpld9r93JdWcQHw=' }}"

      - name: Commit signature to main
        run: |