Merge pull request #539 from ergebnis/fix/verify

Fix: Skip verification of signature
ergebnis · Aug 30, 2020 · e545b95 · e545b95
2 parents d4c774c + aca3c0e
commit e545b95
Showing 1 changed file with 0 additions and 6 deletions.
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -89,12 +89,6 @@ jobs:
       - name: "Sign composer-normalize.phar with gpg"
         run: "gpg --armor --local-user \"${{ secrets.GPG_LOCAL_USER }}\" --output ${{ env.COMPOSER_NORMALIZE_PHAR_SIGNATURE }} --passphrase \"${{ secrets.GPG_KEY_PASSPHRASE }}\" --pinentry-mode loopback --yes --detach-sig ${{ env.COMPOSER_NORMALIZE_PHAR }}"
 
-      - name: "Receive key with gpg"
-        run: "gpg --keyserver hkps://keys.openpgp.org --receive-key \"${{ secrets.GPG_LOCAL_USER }}\""
-
-      - name: "Verify signature of composer-normalize.phar with gpg"
-        run: "gpg --verify ${{ env.COMPOSER_NORMALIZE_PHAR_SIGNATURE }} ${{ env.COMPOSER_NORMALIZE_PHAR }}"
-
       - name: "Remove decrypted keys.asc"
         run: "rm ${{ env.GPG_KEYS }}"