From 461ff0fa01080eb83c2050ebb151d38ee210f931 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Ivan=20Stankovi=C4=87?= Date: Wed, 29 Jan 2025 10:55:06 +0100 Subject: [PATCH] chore: ci: fetch tag objects when checking out the repo for publishing We need to have full tag objects in order to check for signature presence. --- .github/workflows/publish-android.yml | 3 +++ .github/workflows/publish-jvm.yml | 3 +++ .github/workflows/publish-swift.yml | 3 +++ .github/workflows/publish-wasm.yml | 3 +++ 4 files changed, 12 insertions(+) diff --git a/.github/workflows/publish-android.yml b/.github/workflows/publish-android.yml index 641e8026d9..ec00f41159 100644 --- a/.github/workflows/publish-android.yml +++ b/.github/workflows/publish-android.yml @@ -26,6 +26,9 @@ jobs: needs: build-android steps: - uses: actions/checkout@v4 + with: + fetch-tags: true + - name: ensure the tag is signed run: git cat-file tag ${{ github.ref_name }} | grep -q -- '-----BEGIN PGP SIGNATURE-----' - name: set up jdk 17 diff --git a/.github/workflows/publish-jvm.yml b/.github/workflows/publish-jvm.yml index 796675db29..8cf16a6b2a 100644 --- a/.github/workflows/publish-jvm.yml +++ b/.github/workflows/publish-jvm.yml @@ -26,6 +26,9 @@ jobs: runs-on: macos-latest steps: - uses: actions/checkout@v4 + with: + fetch-tags: true + - name: ensure the tag is signed run: git cat-file tag ${{ github.ref_name }} | grep -q -- '-----BEGIN PGP SIGNATURE-----' - name: setup rust diff --git a/.github/workflows/publish-swift.yml b/.github/workflows/publish-swift.yml index 60e23c9f25..40ac2d0aa3 100644 --- a/.github/workflows/publish-swift.yml +++ b/.github/workflows/publish-swift.yml @@ -25,6 +25,9 @@ jobs: with: xcode-version: '14.3.1' - uses: actions/checkout@v4 + with: + fetch-tags: true + - name: ensure the tag is signed run: git cat-file tag ${{ github.ref_name }} | grep -q -- '-----BEGIN PGP SIGNATURE-----' - name: "setup rust" diff --git a/.github/workflows/publish-wasm.yml b/.github/workflows/publish-wasm.yml index d072b26155..42ebd18226 100644 --- a/.github/workflows/publish-wasm.yml +++ b/.github/workflows/publish-wasm.yml @@ -22,6 +22,9 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@v4 + with: + fetch-tags: true + - name: ensure the tag is signed run: git cat-file tag ${{ github.ref_name }} | grep -q -- '-----BEGIN PGP SIGNATURE-----' - uses: actions-rust-lang/setup-rust-toolchain@v1