unom/punktfunk-plugin-index
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore(index): repin to the signing key held in this repo's secret
publish / publish (push) Successful in 26s
Details

Browse Source 
The previous key was pasted into unom/punktfunk's secret store rather than
this one. Gitea secrets don't cross repos and can't be read back, so that
key was unusable here and is abandoned; INDEX_SIGNING_KEY on THIS repo now
holds the private half of the key pinned below.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This commit is contained in:
enricobuehler
2026-07-20 23:05:39 +02:00
co-authored by Claude Fable 5
parent 575ea1a371
commit 05e772fedd
3 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/publish.yml
+1 -1
View File
@@ -70,7 +70,7 @@ jobs:
# auditor would use. Catches a key/host mismatch BEFORE it ships, rather # auditor would use. Catches a key/host mismatch BEFORE it ships, rather
# than as every host in the field silently rejecting the catalog. # than as every host in the field silently rejecting the catalog.
- name: Verify signature - name: Verify signature
run: bun run verify -- --pub "${{ vars.INDEX_PUBLIC_KEY || 'ed25519:qK18TE2qygIyObtMlHxUI/G1gKby8tPxuieAfnEKgYE=' }}" run: bun run verify -- --pub "${{ vars.INDEX_PUBLIC_KEY || 'ed25519:V7KKMg8sq2A2TW7D/GFWaM0ruAvigpld9r93JdWcQHw=' }}"
- name: Commit signature to main - name: Commit signature to main
run: | run: |
README.md
+1 -1
View File
@@ -230,7 +230,7 @@ PR cannot get anything signed.
The public key currently pinned in the host: The public key currently pinned in the host:
``` ```
ed25519:qK18TE2qygIyObtMlHxUI/G1gKby8tPxuieAfnEKgYE= ed25519:V7KKMg8sq2A2TW7D/GFWaM0ruAvigpld9r93JdWcQHw=
``` ```
`bun run verify` defaults to this key, so anyone can audit a published index `bun run verify` defaults to this key, so anyone can audit a published index
tools/keys.ts
+1 -1
View File
@@ -22,7 +22,7 @@ export const PUBKEY_PREFIX = "ed25519:";
* `verify` defaults to this so a signed index can be checked with no arguments. * `verify` defaults to this so a signed index can be checked with no arguments.
*/ */
export const DEFAULT_PUBLIC_KEY = export const DEFAULT_PUBLIC_KEY =
"ed25519:qK18TE2qygIyObtMlHxUI/G1gKby8tPxuieAfnEKgYE="; "ed25519:V7KKMg8sq2A2TW7D/GFWaM0ruAvigpld9r93JdWcQHw=";
/** Encode a node KeyObject public key as the host's `ed25519:<base64>` form. */ /** Encode a node KeyObject public key as the host's `ed25519:<base64>` form. */
export function encodePublicKey(key: KeyObject): string { export function encodePublicKey(key: KeyObject): string {