chore(index): repin to the signing key held in this repo's secret
publish / publish (push) Successful in 26s
publish / publish (push) Successful in 26s
The previous key was pasted into unom/punktfunk's secret store rather than this one. Gitea secrets don't cross repos and can't be read back, so that key was unusable here and is abandoned; INDEX_SIGNING_KEY on THIS repo now holds the private half of the key pinned below. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This commit is contained in:
@@ -230,7 +230,7 @@ PR cannot get anything signed.
|
||||
The public key currently pinned in the host:
|
||||
|
||||
```
|
||||
ed25519:qK18TE2qygIyObtMlHxUI/G1gKby8tPxuieAfnEKgYE=
|
||||
ed25519:V7KKMg8sq2A2TW7D/GFWaM0ruAvigpld9r93JdWcQHw=
|
||||
```
|
||||
|
||||
`bun run verify` defaults to this key, so anyone can audit a published index
|
||||
|
||||
Reference in New Issue
Block a user