From 3562be3d7c755014359305cc402c0519823ddf61 Mon Sep 17 00:00:00 2001 From: James Maes Date: Sat, 10 Oct 2026 16:32:09 -0500 Subject: [PATCH] ci(release): run verify-signatures in the release environment TRUSTED_SIGNING_SUBJECT is a release-environment variable; the job read an empty value and failed on v1.0.2-beta.3 although every published file was signed (verified locally). Closes #99 Co-Authored-By: Claude Fable 5.1 Signed-off-by: James Maes --- .github/workflows/release.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 2334c67..0fe18bb 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -184,6 +184,9 @@ jobs: needs: release runs-on: windows-latest timeout-minutes: 15 + # TRUSTED_SIGNING_SUBJECT is a `release`-environment variable, so the job must + # run in that environment to read it (v1.0.2-beta.3 failed here with it unset). + environment: release permissions: contents: read env: -- 2.54.0