KofTwentyTwo/gclo
2
0 Fork 0
Code Issues 28 Pull Requests 1 Actions Packages Projects Releases 22 Wiki Activity

release: verify-signatures job cannot read TRUSTED_SIGNING_SUBJECT (not in the release environment) #99

New Issue
Closed
opened 2026-10-10 21:32:30 +00:00 by KofTwentyTwo · 0 comments
KofTwentyTwo commented 2026-10-10 21:32:30 +00:00 (Migrated from github.com)
Copy link
Copy source

v1.0.2-beta.3 (run 38087007507): every job passed, the release is published and fully signed (verified locally: 289 files, 0 failures), but the caller-side verify-signatures job failed at its first check because TRUSTED_SIGNING_SUBJECT is a release-environment variable and the job does not run in that environment. Add environment: release to the job. Part of #62.

v1.0.2-beta.3 (run 38087007507): every job passed, the release is published and fully signed (verified locally: 289 files, 0 failures), but the caller-side verify-signatures job failed at its first check because TRUSTED_SIGNING_SUBJECT is a release-environment variable and the job does not run in that environment. Add environment: release to the job. Part of #62.
Sign in to join this conversation.
No Branch/Tag Specified
Labels
Clear labels
.NET
Pull requests that update .NET code
 bug
Something isn't working
 deferred
Agreed follow-up, not scheduled
 dependencies
Pull requests that update a dependency file
 documentation
Improvements or additions to documentation
 duplicate
This issue or pull request already exists
 enhancement
New feature or request
 github_actions
Pull requests that update GitHub Actions code
 good first issue
Good for newcomers
 help wanted
Extra attention is needed
 invalid
This doesn't seem right
 needs-owner
Blocked on an action only the owner can take
 priority
Owner-flagged: work this first
 quality
Standards, simplicity, enforcement
 question
Further information is requested
 refactor
Restructuring without behavior change
 release
Release pipeline / distribution
 wontfix
This will not be worked on
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
forge-recovery (Forge Recovery) james.maes (James Maes)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: KofTwentyTwo/gclo#99